and/or reply_len properly
03:41:58 executing program 0:
r0 = epoll_create1(0x80002)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp, &(0x7f0000000580)=0x80, 0x800)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000005c0)='dctcp\x00', 0x6)
flock(r0, 0x1)
timer_create(0x7, &(0x7f0000000180)={0x0, 0xf, 0x0, @thr={&(0x7f0000000000)="990c8104424783e419686a0d3d90548fa5db437e26b32eabb795a1bf27b0252d6942f8465c8d5bcaa68366c9c2310173dc91f7699fb9ecfac2bad52246363df1dfc210858e882124568146326ec86f19aa6b6b24d7fc41cd15e0481379ad73ce6ced67f8ea762a44afbb76998aa7520a362768925b2aad1c67046f19bd112343f1f40cf6fb7c58e3bface10e2c6e12dad52ab6991cebd5e6749c0609", &(0x7f00000000c0)="d3c87b2fbeb9a8bbe13fc0bd8a3024b8da97bad15614acfb59151b80c991d8346530611b3d01d80ac77ea4a6debc5713967cd1dc4b730f8f47e1f20fd62ddecda1431d709b49e8d881776e98252c72f79419bd09f05034335a1f876670e7ef7bbdb720153f62cc538f2a3ad22eba0d6da8de98d76803613ad743f3bd1fb054db3bbf4996c71d9d64446e45e8cfce4c5f31710fd7807ed52fbfe31e8c0d17b3b6cf1c7e09efa11164863148219d"}}, &(0x7f00000001c0)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000200)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000240))
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r3, r4, 0x0, 0xc, &(0x7f00000002c0)='\'lo${vmnet1\x00', 0xffffffffffffffff}, 0x30)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x21)

03:41:58 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
sched_setscheduler(r0, 0x6, &(0x7f0000000000)=0xe67c)

03:41:59 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x2)
r2 = epoll_create1(0x0)
write$selinux_validatetrans(r0, &(0x7f0000000140)={'system_u:object_r:bin_t:s0', 0x20, 'system_u:object_r:devlog_t:s0', 0x20, 0x4, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x6c)
flock(r2, 0x1)
r3 = gettid()
open(&(0x7f0000000100)='./file0\x00', 0x40000, 0xa)
r4 = dup2(r0, r2)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
write$binfmt_aout(r2, &(0x7f0000000000)={{0x1cf, 0x1, 0x2, 0x38, 0x20b, 0x8, 0x27c, 0x8}, "dad53841156baf025e887accc0ac3ae1e65122e09ec4e14fad0d4c863d7f2fdf5f762f009521b01f974e4d947747fc876c07491188025e1fcd5d12be3590c8c40507e7e54dcb1f220e71d836ef9064748f4b42a42298e6e12c7e790e8095003a3cbb7ed1346a6567112959d532af44574f1f6292228366db686bcf6df491f1df3ffadd1c6815b59cbb6ce1e25504c6b8eb6dbb6c1b634c0203b9358246ab6aac205bb9a4bc4c82500467201412c39a47"}, 0xd0)
tkill(r3, 0x1000000000016)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000001c0)=""/56)

03:41:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]]}, 0x120)

03:41:59 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000000)={0x6, 0x8, 0x6})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:41:59 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x7, &(0x7f0000000000)=0x101)
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:41:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]]}, 0x120)

03:41:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]]}, 0x120)

03:41:59 executing program 2:
clone(0x80008, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x9, &(0x7f0000000200))
r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/netstat\x00')
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/145)
splice(r1, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000080), 0x23, 0x80)

03:41:59 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
dup2(r0, r1)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x8)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:41:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff]]}, 0x120)

03:41:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]]}, 0x120)

03:41:59 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
pause()
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:41:59 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:00 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=<r2=>0x0)
tkill(r2, 0x32)
flock(r1, 0x2)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4)
r3 = epoll_create1(0x0)
flock(r3, 0x1)
r4 = gettid()
dup2(r0, r3)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r4, 0x1000000000016)
vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="da1294836c572f854e4511cc96e78ea82f309052", 0x14}, {&(0x7f0000000080)="b55150df8901292232d533b07af4d98be8c2bd0cdf973820b7a70621aebc0cfd017e2091d5416fa89ec7b55cc4d0adcbebd3ef7b97282de97d5fc8c013afe48ed965a5e7a68dcefba6e0b0c2c6a2d18855999a1c64df457be52f8934f5ce42f0024f7b87769e581364b7655ab8e4b2af679ea3e279b5ed87adffb30689752a70c69f", 0x82}], 0x2, 0x7)

03:42:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]]}, 0x120)

03:42:00 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x4)
getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000240)=""/181, &(0x7f00000000c0)=0xb5)
splice(r1, &(0x7f0000000080)=0x4000004000000001, r1, &(0x7f0000000140), 0x3, 0xb)

03:42:00 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0)
ioctl$RTC_WIE_OFF(r2, 0x7010)
r3 = gettid()
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

03:42:00 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x984, 0x3)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:00 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000240)=""/4096)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={<r2=>0x0, 0x5, 0x1, 0x5}, &(0x7f00000000c0)=0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001240)='/dev/ppp\x00', 0x40000, 0x0)
write$P9_RRENAME(r1, &(0x7f0000001280)={0x7, 0x15, 0x1}, 0x7)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x4, 0x2, 0x800f, 0x8, 0xffffffffffffffff, 0x10000, 0x10001, 0xffffffffffffffff, r2}, &(0x7f00000001c0)=0x20)
socketpair(0x0, 0xf, 0x3, &(0x7f0000001300))
socket$netlink(0x10, 0x3, 0x1d)
io_setup(0xf9, &(0x7f00000012c0)=<r3=>0x0)
io_destroy(r3)

03:42:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]]}, 0x120)

03:42:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]]}, 0x120)

03:42:00 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x8000, {0x2, 0xfff, 0x8, 0x400, 0x100, 0x2}})
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x406040, 0x0)
perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x2, 0xffffffff80000001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x7f, 0x3, 0x4, 0x7ff, 0x4, 0xf, 0x1, 0xffffffff, 0x200, 0x8, 0xffffffffffffc22a, 0x5, 0x10000, 0x5, 0x4, 0x9, 0xd13, 0xe74, 0x0, 0xfffffffffffffffb, 0x1, 0x100000000, 0x0, 0x599b, 0x1ff, 0x100000000, 0x2, 0xfffffffffffffffa, 0x0, 0xc7, 0x4, @perf_config_ext={0x9, 0x70}, 0x3000, 0x0, 0x5, 0x1, 0x200, 0xeff}, r1, 0x8, r3, 0x1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]]}, 0x120)

03:42:00 executing program 2:
clone(0x2182001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x80000)
getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)=""/50, &(0x7f00000000c0)=0x32)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]]}, 0x120)

03:42:01 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x40, 0x0)
r1 = epoll_create1(0x0)
fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, <r2=>0x0})
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=<r3=>0x0)
tgkill(r2, r3, 0xd)
flock(r1, 0x1)
r4 = gettid()
r5 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
r6 = geteuid()
setfsuid(r6)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000180)=0x101)
ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x1)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r4, 0x1000000000016)

03:42:01 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4080, 0x0)
ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36000000]]}, 0x120)

03:42:01 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x63)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000380)="88", 0xfffffffffffffda5}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xf, 0x1c, 0x10, "1002b24d6ce714f5445e436f2ca1477680902b35d1ee8baddf103047b35c7da0dff0f9b05568f9a484b6a6d2c891c6a4124aff5929ed921babd2956a40432b25", "80447a88053f3f83dd1d91b3ac705972089c98cdb579f1216c3ca47b9a28419d", [0x6, 0x1]})
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:01 executing program 1:
r0 = syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x7, 0x2200)
getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000500), &(0x7f0000000540)=0x4)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = epoll_create1(0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'veth1_to_team\x00', {0x2, 0x4e21, @local}})
flock(r2, 0xfffff)
flock(0xffffffffffffffff, 0x1)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000580)={0x0, r0})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r3=>r1})
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0x6b01aea, 0x4)
r4 = gettid()
r5 = dup2(r1, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
socket(0x11, 0x3, 0x1)
execveat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000180)='vboxnet1--\x00', &(0x7f00000001c0)='veth1_to_team\x00', &(0x7f0000000200)="776c616e31f800", &(0x7f0000000240)='%\'}\x00', &(0x7f0000000280)='veth1_to_team\x00'], &(0x7f0000000400)=[&(0x7f0000000300)='veth1_to_team\x00', &(0x7f0000000340)='veth1_to_team\x00', &(0x7f0000000380)='veth1_to_team\x00', &(0x7f00000003c0)='veth1_to_team\x00'], 0x1000)
socket$nl_xfrm(0x10, 0x3, 0x6)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000440)=""/97)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000005c0)=0x400001d)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
tkill(r4, 0x1000000000019)

03:42:01 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2662, 0x2)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f00000000c0), 0x3, 0x80)

03:42:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]]}, 0x120)

[  895.165512] sg_write: 10 callbacks suppressed
[  895.165529] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  895.165529]    program syz-executor5 not setting count and/or reply_len properly
03:42:01 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x4, &(0x7f0000000040)={{r3, r4+30000000}, {0x0, 0x989680}}, &(0x7f0000000000))
tkill(r1, 0x1000000000016)

03:42:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]]}, 0x120)

[  895.259944] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  895.259944]    program syz-executor5 not setting count and/or reply_len properly
03:42:01 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = msgget$private(0x0, 0x20)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000240)=""/198)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
getpid()

03:42:01 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000080)=0xfffffd09)
setfsgid(r1)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:01 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x8000000006)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040))
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

[  895.390595] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  895.390595]    program syz-executor5 not setting count and/or reply_len properly
03:42:01 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
epoll_create1(0x0)
flock(r0, 0x2)
r1 = gettid()
dup2(r0, r0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:01 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x2)
r2 = epoll_create1(0x0)
flock(r2, 0x1)
r3 = gettid()
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{0x3, 0x6}, {0x7, 0x3}, 0x718, 0x3, 0x3})
dup2(r0, r2)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

03:42:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]]}, 0x120)

03:42:01 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000140)=0x80000001)
splice(r1, &(0x7f00000000c0), 0xffffffffffffffff, &(0x7f0000000080)=0x80000001, 0x6, 0x2)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in6, @in=@local}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8)

[  895.551892] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  895.551892]    program syz-executor5 not setting count and/or reply_len properly
03:42:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]]}, 0x120)

03:42:01 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x70, 0x2, 0x9, 0x3ff, 0x4, 0x0, 0x8, 0x20040, 0x6, 0xff, 0x7ffa, 0x6, 0xffffffffffff8001, 0x4, 0x4, 0x3, 0xfffffffffffffffc, 0x0, 0x2, 0x1c0000, 0x0, 0x1, 0x10001, 0x20, 0xa02a, 0x9, 0x401, 0x3b64, 0x7, 0x5, 0x2, 0x40, 0x9, 0x7, 0x7, 0x1, 0x80000000, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x10, 0x6, 0x4, 0x0, 0x4, 0x6, 0xc4f4}, 0xffffffffffffffff, 0x3, 0xffffffffffffff9c, 0x0)
splice(r1, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x100, 0x0)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0xe}, @multicast1, 0x1, 0x5, [@loopback, @rand_addr=0x8, @broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @rand_addr=0x8]}, 0x24)

03:42:01 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3)
socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000080)=""/45, &(0x7f00000000c0)=0x2d)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  895.653635] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  895.653635]    program syz-executor5 not setting count and/or reply_len properly
03:42:02 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)
clock_nanosleep(0x200000007, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000080))

03:42:02 executing program 2:
socketpair(0x8, 0x800, 0x89, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, <r1=>0x0]}, &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r1, 0x4)
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]]}, 0x120)

03:42:02 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x20480)
tkill(r2, 0x1000000000016)

03:42:02 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000400)={0xd3cf, 0xead, 0x2c7d, 0x0, 0x0, [], [], [], 0x2, 0x1d58ee41})
socket$rds(0x15, 0x5, 0x0)
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:02 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
r1 = dup(0xffffffffffffff9c)
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000002c0)={0x3ff, {0x2, 0x4e22, @rand_addr=0xe5}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @broadcast}, 0xb1, 0x6, 0xef0, 0x9477, 0x3ff, &(0x7f00000000c0)='ip6tnl0\x00', 0x4, 0x5, 0x100000001})
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
write$evdev(r2, &(0x7f0000000180)=[{{r3, r4/1000+30000}, 0x16, 0x3, 0x1ff}, {{0x77359400}, 0x11, 0x17a, 0x400}, {{0x77359400}, 0x0, 0x4, 0xffffffffffffffe0}, {{0x0, 0x2710}, 0x16, 0x3, 0x3}, {{0x77359400}, 0x4, 0xe48}], 0x78)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
write$P9_RSTAT(r2, &(0x7f0000000240)={0x57, 0x7d, 0x2, {0x0, 0x50, 0x7, 0x7, {0x4, 0x1, 0x2}, 0x1200000, 0xfffffffffffffffc, 0x3, 0x8001, 0x4, 'user', 0x0, "", 0x15, "776c616e317b246d643573756d74727573746564ce", 0x4, 'user'}}, 0x57)

[  896.283473] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  896.283473]    program syz-executor5 not setting count and/or reply_len properly
03:42:02 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x2)
r2 = epoll_create1(0x80000)
flock(r2, 0x1)
r3 = gettid()
dup2(r0, r2)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

03:42:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]]}, 0x120)

03:42:02 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:02 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0xffffffffffffffe5, 0x2, 0x1, 0x6, 0x2, 0x2, 0xcb62, 0x2, 0x2, 0x80000001, 0x0, 0x1})
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  896.445522] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  896.445522]    program syz-executor5 not setting count and/or reply_len properly
03:42:02 executing program 2:
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2c0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000080)=[{}], 0x0, [{}, {}, {}]}, 0xa8)
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]]}, 0x120)

[  896.574128] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  896.574128]    program syz-executor5 not setting count and/or reply_len properly
03:42:03 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x7)

03:42:03 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xfffffffffffffff9, 0x1)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000180)=""/238)
r1 = getpid()
sched_setscheduler(r1, 0x8000000000000005, &(0x7f0000000000))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r2 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)="5e7c6e612496808978fba2c4a5743afd4f8dc931bfb32ead67a6612f9e995a2349b4572992443b7e631d9f2ddf0be3965e1fba3a1789da3add2867a74e7f77f0d070eac0be94f978b6f267b6acf9fbb8718f73862c1d640bfcf3b6002769f8e1be5a6244a620b49b7a4c03383c6f128814a724e0b638e46e30d1eeaf592d3feea488b57c261c9c5c7b7fb2b80d1b7aad4ee573", 0x93, r2)
openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0)

03:42:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbf]]}, 0x120)

03:42:03 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000000)=""/123)
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f00000000c0), 0x0, 0x0)

03:42:03 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x4, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x8, 0x4)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x801000000000016)

03:42:03 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  897.306193] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  897.306193]    program syz-executor5 not setting count and/or reply_len properly
[  897.375838] Unknown ioctl 21666
[  897.381046] Unknown ioctl 21666
03:42:03 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x2)
recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000300)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000380)=""/115, 0x73}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/221, 0xdd}], 0x4, &(0x7f0000001640)=""/135, 0x87, 0x81}, 0xdf87}, {{&(0x7f0000001700)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001780)=""/172, 0xac}, {&(0x7f0000001840)=""/75, 0x4b}, {&(0x7f00000018c0)=""/169, 0xa9}, {&(0x7f0000001980)=""/56, 0x38}, {&(0x7f00000019c0)=""/30, 0x1e}], 0x5, 0x0, 0x0, 0x1}, 0x3}], 0x2, 0x100, &(0x7f0000001b00)={0x77359400})
getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001b40), &(0x7f0000001b80)=0xc)
r3 = epoll_create1(0x0)
flock(r3, 0x4)
r4 = gettid()
r5 = dup2(r3, r3)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000040)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8)
perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x7, 0x80, 0x0, 0x0, 0x0, 0x7ff, 0x10011, 0x1, 0x8, 0x3, 0x1e, 0x4, 0x6, 0x2, 0x1, 0x7fffffff, 0x0, 0x8, 0xd2, 0x5, 0x101, 0x1, 0x5, 0x1000, 0x40, 0x1000000000000, 0x9, 0x9, 0x75b, 0x800, 0x80000001, 0xfffffffffffff2ad, 0x8, 0x0, 0x1000, 0x5c, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000240)}, 0x8000, 0x8000, 0x3, 0xcac60482e9d8cf0b, 0xfffffffffffeffff, 0x10000, 0x3}, r4, 0x10, r5, 0xb)
setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000180)={r6, 0x1, 0x6, @local}, 0x10)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r4, 0x1)
ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000200)={0x34, 0x0, &(0x7f00000001c0)})

03:42:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6]]}, 0x120)

03:42:03 executing program 2:
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_default\x00')
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x2, 0x0)
io_setup(0x6, &(0x7f0000001700))
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={<r3=>0x0})
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_netfilter(r2, &(0x7f00000016c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001680)={&(0x7f0000000380)={0x12f0, 0x13, 0xb, 0x20, 0x70bd27, 0x25dfdbfe, {0x3, 0x0, 0x3}, [@typed={0x8, 0x23, @pid=r0}, @typed={0x8, 0x74, @ipv4=@multicast1}, @typed={0x8, 0x29, @pid=r0}, @typed={0x8, 0x8, @ipv4=@local}, @generic="dee0fc299bb6b93b85da632c8ece1330110d3fd0e6e53d88f12c2e9337384e256114a2987c077c6839e41cca7370643150727c9bd60d7fead29627efe0f3c09f1256d1791467bed8f7df", @nested={0x125c, 0x34, [@typed={0x4, 0xc}, @typed={0x8, 0x75, @uid=r4}, @generic="3e027c512d10bb231b540dd3e478dcf0b43b20f04a5e2cdd7d75aa9d8ba00edcc429b1deab5d8403c10b2faee7896f641faee145c8e9b25ffb8775812e0e8e7c57424df7bffb7f6b05d5103046c328b2b91eb066765fd6713c30078745b9a16bbd4d03a7973865e4cbc66567a6a3d7c9cb7f3eb46aa7", @typed={0x8, 0x64, @ipv4=@multicast2}, @generic="f0e30078528f9fc5403594d3e9f0e5f2f24b1bcc8f5557dba55ec33a5689492b2b8fafc3c54cec60938b6d65cc51fe22941d79a236cbec5efe6c4732f3fcf1589e3f1961aa4fd58d", @typed={0x8, 0x5b, @pid=r0}, @generic="228bca51d2487575c92c1cf3b2c410b7adadf52b434dc161576e076be2caf798a7c2a56bbe6dd6cbe107aeaf5d8667d7e5d3275f0d4664101544da3809f1d7a57268219d48befc5088fb1e0a56eb036f84ef7770572a9dcebbe4c7c35c098a6dbd424d82ba163aa18dab1cb780f076f3d843abb6d481570861e5a604e508c75e3a8d1c3bbf9a57b1d37a5552a830897b3f3934fee64a9223fdbe66f58537162a2025a44b0f57fea9a2", @typed={0xc, 0x33, @u64=0x4b58}, @generic="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", @generic="838ffe5dca96d21a394f55a3d025e2773c27f929b749361d644cdf4174b5a870e5af32715378f293b4d58deee53b2ff9dadd608931c6f5c67086d5dcb0c05c02bd50bbbf212a47b92779a94f86897402e2b494e7c01f80ddabe69e9c124351b88b4ef0c6d5cc1baf3697c5871fa5d2574ade9453ba86f31592d71334e99e3ad56efa9cc75fcd642614bc50dd5a2a3c4bc11aea8955fa19e56397f551fc20f55b6ecaadffeb4cc85cb0d56c564a831b94486bf35b14f72141cc9a771325f76a170c87b00dd1de"]}, @typed={0x8, 0x60, @ipv4=@rand_addr=0x2}, @typed={0xc, 0x18, @binary="43da67e111da"}]}, 0x12f0}, 0x1, 0x0, 0x0, 0x4004000}, 0x80)
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0)={r3, 0x2})
bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="060000000000000000000000ec00000061180c00000000002500000007060040000000003900"], &(0x7f0000001780)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48)
ptrace$pokeuser(0x6, r0, 0x7, 0x8)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:03 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
r1 = creat(&(0x7f0000000540)='./file0\x00', 0x80)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000200)={<r2=>0x0, @in6={{0xa, 0x4e20, 0x6b1, @loopback, 0x80000000}}, 0x1000, 0x34, 0x5, 0x5, 0x1}, &(0x7f00000002c0)=0x98)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r2, @in={{0x2, 0x4e22, @broadcast}}, [0x2, 0x80, 0x0, 0x7ff, 0x8000, 0x9, 0x9, 0x1, 0xfff, 0xfffffffffffffffd, 0x9, 0x3, 0x6, 0x9, 0x4]}, &(0x7f0000000400)=0x100)
r3 = epoll_create1(0x0)
flock(r3, 0xf)
r4 = gettid()
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000440))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={<r6=>r2, 0x1020000000004, 0x2be881d8}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000001c0)={r6, 0xfffffffffffff000}, 0x8)
getpeername$packet(r5, &(0x7f0000000580)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
bind$xdp(r5, &(0x7f0000000600)={0x2c, 0x1, r7, 0x3e, r1}, 0x10)
timer_create(0x0, &(0x7f0000000500)={0x0, 0x12, 0x3, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00000004c0)=<r8=>0x0)
timer_settime(r8, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f00000000c0))
r9 = getuid()
getgroups(0xa, &(0x7f0000000000)=[0x0, 0xee00, 0xee00, <r10=>0x0, 0xee00, 0xee00, 0xee00, 0xee00, 0xee00, 0xee00])
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={r4, r9, r10}, 0xc)
tkill(r4, 0x1000000000016)
getitimer(0x2, &(0x7f0000000480))

03:42:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]]}, 0x120)

[  897.495127] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  897.495127]    program syz-executor5 not setting count and/or reply_len properly
03:42:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]]}, 0x120)

03:42:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]]}, 0x120)

03:42:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]]}, 0x120)

03:42:03 executing program 2:
clone(0x1ffdfff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
r0 = syz_open_dev$usb(&(0x7f0000000d80)='/dev/bus/usb/00#/00#\x00', 0x3, 0x8140)
sendmsg$inet_sctp(r0, &(0x7f0000000600)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xf0, @ipv4={[], [], @remote}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000240)="c06c52b992f86e20d13d7bf31cc017e05a86e2058515b492d340dafea0eb72609bdf222745dca0c6c86baf07d4e9e3e72098f99b9cfd57318bb8e5b626369ba9c90d0372ae97d27e81fdb52af5911fbf32839f945704c42b71faa0a6710df03cc07662d1953f78ab3d4a0510ab77aae7cd54836866f0dd776d2d15a782ae93e07541dc566a5fd0af5293343ebf9c9e73a70f59709c9e17a3657b4e098b03f0da132c26e7a44d52df", 0xa8}, {&(0x7f0000000300)="35ba94caa62dc00212d077315ff035b7ebeb8561428b5646acb63e058a1d5360a1c69b6aad66e425834b7c6a768aba87f0a088f30d50cdcc0b3e940b59804d5310a56e9c939699c0193c1b0bbc6f57a002d62b6240c92b9248394d62f43b7d5c9490cc130c7625936676e3d6c84b0e883d0e07496ddb736b459d7b66b1b2c89c49c84deb5ead633cd2fcb132ea49e3fff872c845f8de41d9c63614117c28f5d0f23ed7436d8769549e526939ded255a973f96f2974f34080650e041a8531773d7b0d521fca0d758b3784db3bd5c31361bc82fbfe9c0f05c8c113016837b5327db6afbdeaf3318eed2a69267217", 0xed}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000500)="e8a3ec4a66b30135019cc13ca4f414798bf27b650b9e4ab2c60cfb5ed5d570da45567836feca6927f4093c6c30ceeec0261a2ee8b34e1e9bd578a431cc7303963e6fe57bf9ae71dc46e130bb6847042c17429b81e353b6440ece0c0ec2237e9b60aa94a89e64173bbbca876e895d16c504134a339f512b060764228e15c045316b504a3a297b1a07b1103a769dc8aeb3c0b9d9aaca6e959e5642e2", 0x9b}], 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000deb2402501180000000000000084000000001500004495000007000400"], 0x38, 0x40000}, 0x0)
r1 = getpid()
ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000d00)={0x30, "b7ed1d56d35305fa1b7749bdec8461a4dafedfca17d41115e4064dae5553a897000c40f55e79e47841f4e1507ca8152c"})
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x26, 0x200040)
setsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000040)="98d6cc640ac722c9f60883586d106b09317d4f0b625853b4ce6f5efae94379b505bd100d24d710c461803b2f6928da5df75ee475e0ab8c3b9d6c5cd1d21bef01", 0x40)
recvmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000640)=@can={0x1d, <r3=>0x0}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000780)=""/137, 0x89}, {&(0x7f0000000840)=""/164, 0xa4}, {&(0x7f0000000900)=""/204, 0xcc}, {&(0x7f0000000a00)=""/43, 0x2b}, {&(0x7f0000000a40)=""/28, 0x1c}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x7, &(0x7f0000000c00)=""/99, 0x63, 0x68d6}, 0x1)
connect$packet(r2, &(0x7f0000000cc0)={0x11, 0x11, r3, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:04 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x200000000d6, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
io_destroy(r2)
setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r3=>0x0)
fcntl$setown(r0, 0x8, r3)
tee(0xffffffffffffffff, r1, 0x8, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
ioctl$KDENABIO(r1, 0x4b36)

03:42:06 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000000)=""/198, 0xc6}, &(0x7f0000000100), 0x4}, 0x20)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]]}, 0x120)

03:42:06 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10)
r2 = accept$alg(0xffffffffffffff9c, 0x0, 0x0)
fcntl$dupfd(r1, 0x0, r2)
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:06 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x2)
flock(0xffffffffffffffff, 0x1)
r2 = gettid()
dup2(r0, 0xffffffffffffffff)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:06 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x10000000000000e4, 0x3)

[  900.327736] sg_write: 4 callbacks suppressed
[  900.327753] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  900.327753]    program syz-executor5 not setting count and/or reply_len properly
03:42:06 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
fgetxattr(r1, &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000240)=""/188, 0xbc)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]]}, 0x120)

03:42:06 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:06 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x80000)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000040)={0x5, 0x1})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000000)=""/2)

03:42:06 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, <r0=>0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)="db2b63707573657400"}, 0x30)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000240)=0xa)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  900.533797] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  900.533797]    program syz-executor5 not setting count and/or reply_len properly
03:42:06 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00')
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={<r2=>0x0, 0x1}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x10000}, 0x8)

03:42:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]]}, 0x120)

03:42:06 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
ptrace$setregset(0x4205, r0, 0x7, &(0x7f0000000000)={&(0x7f0000000080)="baccf54a1d53ad00591d8e243937938270603ffbe55bc399a592a74b7836064d47f6d708b97edd6c69068a7c94751b80e60005999fab2c93181a5394b65e8d", 0x3f})
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000180))

03:42:06 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040), 0x10)

[  900.653659] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  900.653659]    program syz-executor5 not setting count and/or reply_len properly
03:42:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600000000000000]]}, 0x120)

[  900.758963] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  900.758963]    program syz-executor5 not setting count and/or reply_len properly
03:42:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600]]}, 0x120)

03:42:07 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x242000, 0x0)
r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x10001)
linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x400)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x8, 0x40)

03:42:07 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:07 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0)
flock(r1, 0x2)
r3 = epoll_create1(0x0)
flock(r3, 0x1)
r4 = gettid()
dup2(r0, r3)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$SCSI_IOCTL_SYNC(r2, 0x4)
tkill(r4, 0x1000000000016)

[  901.232888] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  901.232888]    program syz-executor5 not setting count and/or reply_len properly
03:42:07 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x12f)
ioctl$TIOCNOTTY(r1, 0x5422)
sysfs$1(0x1, &(0x7f00000000c0)='/dev/mixer\x00')
fcntl$getown(r1, 0x9)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
ioctl$KDMKTONE(r1, 0x4b30, 0x5)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80001, 0x0)
pwrite64(r2, &(0x7f0000000040)="f10952730cf3b80e6701b80fb4bc708f3f7749b8ad7364c2d389840e6bb8abc99bcdc3ee3a0ae91aabb49f69ef81a0c6349301c30822e0a593b85434", 0x3c, 0x0)

03:42:07 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0xffffffffffffff0a}, {0x2000000, 0x2}]})
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x1)

03:42:07 executing program 3:
epoll_create(0x40)
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
tkill(r2, 0x13)

03:42:07 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x8)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/mnt\x00')

03:42:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]]}, 0x120)

03:42:07 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
socket$bt_hidp(0x1f, 0x3, 0x6)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]]}, 0x120)

[  901.621978] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  901.621978]    program syz-executor5 not setting count and/or reply_len properly
03:42:07 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = socket$inet6(0xa, 0x8000b, 0x2)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @ipv4={[], [], @loopback}, 0x6}, 0x1c)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6000000]]}, 0x120)

[  901.697090] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  901.697090]    program syz-executor5 not setting count and/or reply_len properly
03:42:07 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xaf)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000240)={<r2=>0x0, 0x7c, "aed011470cbaba13dd7fd090cbd720bdebafc8631f77bc7cd2ccd8b663759332fa249b55b2f043e204c2d18cb7cd768d8cdcc6fbc903af980799ab48b4f0612798460f8f763e0dafec5ee5ec1426b45edc78c69a9d8049e0039fa891c93fe77328b34e055c726da92d51b8324e96665731ea31bd6888b588c25b9400"}, &(0x7f0000000080)=0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0x9, @mcast1, 0x5}}}, 0x84)

[  901.785070] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  901.785070]    program syz-executor5 not setting count and/or reply_len properly
03:42:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]]}, 0x120)

[  901.894984] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  901.894984]    program syz-executor5 not setting count and/or reply_len properly
03:42:08 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="19020700a10e0000ee0009b81d455e000900"], &(0x7f0000000180)=0x16)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x80b, 0x5, 0x8, 0xec20, 0xffff, 0x8, 0x22, 0x0, r2}, 0x20)
flock(r1, 0x2)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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")
r3 = epoll_create1(0x0)
r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/user\x00')
flock(r4, 0x4)
r5 = gettid()
r6 = dup2(r0, r3)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x13, 0x7, @tid=r5}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r5, 0x1000000000016)
getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000280)=0x4)

03:42:08 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x60242, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x5, [0x1000, 0x5, 0x20, 0x0, 0x5f]}, &(0x7f00000000c0)=0xe)
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:08 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000000)={0x0, 0x50, 0x6, 0xffffffffffffff00, 0xffffffffffff25cc, 0x9})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='@+*trusted:\x00', r3}, 0x10)
tkill(r2, 0x100000000000012)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080))

03:42:08 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]]}, 0x120)

03:42:08 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={<r5=>0x0, 0x2a5400cb}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={r5, 0x1c39, 0x4}, 0x8)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:08 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x80000, 0x0)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setuid(r3)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10003, 0x41)
ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f00000002c0)={0x7, 0x1e})
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={<r5=>0x0, 0x8}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r5, 0x74}, 0x8)
getdents64(r4, &(0x7f0000000040)=""/156, 0x9c)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x7, [<r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x20)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r6, 0x4}, &(0x7f0000000280)=0x8)
tkill(r1, 0x1000000000016)

03:42:08 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/96, &(0x7f0000000180)=0x60)
r1 = getpid()
getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x8100, 0x0)
ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f00000013c0)={0x7, 0x3f, 0x40, 0x1000, &(0x7f0000000240)=""/4096, 0xe9, &(0x7f0000001240)=""/233, 0x55, &(0x7f0000001340)=""/85})
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:08 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]]}, 0x120)

[  902.192009] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  902.192009]    program syz-executor5 not setting count and/or reply_len properly
03:42:08 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]]}, 0x120)

03:42:08 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000240)={'nat\x00', 0x1000, "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"}, &(0x7f0000000080)=0x1024)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:08 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000]]}, 0x120)

03:42:08 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200)=0x6)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000000c0))
pipe2(&(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x4000)
ioctl$TIOCNOTTY(r2, 0x5422)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]]}, 0x120)

03:42:11 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:11 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1)
ioctl$KVM_SET_CPUID(r5, 0xc0185500, &(0x7f00000001c0)=ANY=[@ANYBLOB="8006"])
mknod(&(0x7f00000000c0)='./file0\x00', 0x4, 0xfff)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
r6 = semget$private(0x0, 0x0, 0x0)
semtimedop(r6, &(0x7f0000000000)=[{0x3, 0x7, 0x1800}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380})

03:42:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e22, @loopback}})
tkill(r2, 0x1000000000016)

03:42:11 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x100000011)
flock(r1, 0x2)
r2 = geteuid()
getgroups(0x2, &(0x7f0000000100)=[0xffffffffffffffff, <r3=>0xffffffffffffffff])
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x2004048, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}]}})
r4 = epoll_create1(0x0)
flock(r4, 0x1)
r5 = gettid()
r6 = dup2(r0, r4)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x9, 0x1, 0xaba3, 0x40, 0x0, 0x8001, 0x6c8, 0x4, 0x3, 0x80000001, 0x200, 0x7, 0x7400000000000000, 0x0, 0x81, 0x1f, 0x15c00000000, 0xfffffffffffff000, 0x101, 0xbe, 0xab40, 0x38feffdb, 0x5, 0x8001, 0x1, 0x1454, 0xe94, 0x9b3, 0x2, 0x6, 0x1, 0x9, 0x3, 0x9, 0x7c, 0x0, 0x0, 0x5, 0x7, @perf_config_ext={0x0, 0xea}, 0x1008, 0x86f, 0xba5, 0x0, 0x35, 0x4, 0x10000}, r5, 0x10, r6, 0xb)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f0000000200)={0x1, 0x20, 0x1})
tkill(r5, 0x1000000000016)

03:42:11 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)
r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/route\x00')
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={<r3=>0x0, 0xa00000000000}, &(0x7f0000000180)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4)
fgetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)=""/191, 0xbf)

03:42:11 executing program 2:
r0 = getpgrp(0xffffffffffffffff)
waitid(0x2, r0, &(0x7f0000000000), 0x80000008, &(0x7f0000000240))
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  905.338422] sg_write: 3 callbacks suppressed
[  905.338449] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  905.338449]    program syz-executor5 not setting count and/or reply_len properly
03:42:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600]]}, 0x120)

03:42:11 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0x7f, 0x4)

03:42:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36]]}, 0x120)

[  905.499874] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  905.499874]    program syz-executor5 not setting count and/or reply_len properly
03:42:11 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
getsockname(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x80)
setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000240)={0x800, {{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xc}, 0x338}}}, 0x88)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:11 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x60)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffff9c)
kcmp(r0, r0, 0x7, r1, r2)
splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f0000000140)=0x4000000000000000, 0x200000000003, 0x80)

03:42:11 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x80002)
flock(r1, 0x1)
r2 = gettid()
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

[  905.597339] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  905.597339]    program syz-executor5 not setting count and/or reply_len properly
03:42:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600000000000000]]}, 0x120)

03:42:11 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
get_thread_area(&(0x7f0000000000)={0x7, 0x100000, 0x4000, 0x70, 0x7ff, 0x399, 0xa0f, 0x2da, 0x0, 0x8})

03:42:11 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f0000000000)=<r2=>0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x3, 0x6})
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0))

[  905.700232] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  905.700232]    program syz-executor5 not setting count and/or reply_len properly
03:42:11 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0)
connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfb, 0x800}, 0xc)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_newrule={0x48, 0x20, 0x3783c1fc05c6f371, 0x70bd2a, 0x25dfdbfd, {0x2, 0x94, 0x0, 0x8, 0x5, 0x0, 0x0, 0xf, 0x14}, [@FRA_FLOW={0x8, 0xb, 0x200}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_FLOW={0x8, 0xb, 0xd2}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}, @FRA_FLOW={0x8, 0xb, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040001)

03:42:12 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
r2 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)="21657468317b6d643573756d3a2a2d6367726f75702374727573746564776c616e316e6f646576285e29e847504c626465762d7b00", 0xffffffffffffffff)
r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$link(0x8, r2, r3)
r4 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x200000)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000180)=0x2, 0x4)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={<r5=>0x0, 0x1}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e22, 0x70c, @local, 0x1}}, 0x3, 0x0, 0x7, 0xffffffff, 0x21}, 0x98)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]]}, 0x120)

03:42:12 executing program 1:
perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
mount(&(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080))
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

03:42:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
ioctl$TCSETS(r3, 0x5402, 0xfffffffffffffffd)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:12 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x124, 0x22002)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {r2, 0x80}, {r3, 0x28}, {r4, 0x95f6}], 0x4, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x3}, 0x8)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:12 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8)
r6 = getegid()
fchownat(r3, &(0x7f0000000000)='./file0\x00', r5, r6, 0x0)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

[  906.189559] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  906.189559]    program syz-executor5 not setting count and/or reply_len properly
03:42:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]]}, 0x120)

03:42:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]]}, 0x120)

03:42:12 executing program 1:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)

[  906.273701] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  906.273701]    program syz-executor5 not setting count and/or reply_len properly
03:42:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]]}, 0x120)

03:42:12 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000000000)={0x0, 0xf, 0x0, @tid=r2}, &(0x7f0000000040))
flock(r1, 0x1)
gettid()
r3 = gettid()
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200000, 0x0)
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

[  906.349825] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  906.349825]    program syz-executor5 not setting count and/or reply_len properly
03:42:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]]}, 0x120)

[  906.456713] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  906.456713]    program syz-executor5 not setting count and/or reply_len properly
[  906.517066] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  906.517066]    program syz-executor5 not setting count and/or reply_len properly
03:42:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]]}, 0x120)

03:42:13 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={<r2=>0x0, 0x53e}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000200)={r2, 0x7ff}, &(0x7f0000000280)=0x8)
io_setup(0x8, &(0x7f00000001c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r1, &(0x7f0000000000), r1, &(0x7f0000000040)=0x1f, 0x1, 0xa)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={"7665746831000000000000000200", &(0x7f0000000340)=@ethtool_perm_addr={0x1b, 0x4, "8dd31a86"}})
close(r6)
r7 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r7, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
io_destroy(r3)
tee(r4, r1, 0x8, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:13 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
rmdir(&(0x7f0000000000)='./file0\x00')
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:13 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc)=<r3=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
r4 = shmget(0x1, 0x1000, 0x1001, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_LOCK(r4, 0xb)
fcntl$getownex(r1, 0x10, &(0x7f00000001c0))
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/member\x00', 0x2, 0x0)
r5 = socket$inet6_dccp(0xa, 0x6, 0x0)
timer_settime(r3, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040))
r6 = dup2(r1, r0)
sendto(r5, &(0x7f0000000240)="aa0c00939c6501c78a6785113a062b31991ada5cd345c7b5f8d101ad49887d2bc84acbc7ea2e126599ec7bd872eeac6baa796701d2798ce67b2c4a97d96c63e097f455f7db4cf5c79cdddad69a37903e0ca9", 0x52, 0x40000, &(0x7f00000002c0)=@l2={0x1f, 0x4, {0x7fff, 0x80, 0xdb9, 0x18f7, 0xffffffffffffff01, 0x1f}, 0xab, 0x8000}, 0x80)
fcntl$getownex(r0, 0x10, &(0x7f0000000140))
ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000080)=""/91)
tkill(r2, 0x1000000000016)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000200)={0x5, [0x5, 0x1, 0x9, 0x7, 0x7f]}, 0xe)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

03:42:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00')
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x4, 0x7]}, &(0x7f00000000c0)=0x8)
madvise(&(0x7f0000c24000/0x3000)=nil, 0x3000, 0x4000000000000008)
clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040))
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)

03:42:13 executing program 2:
r0 = mq_open(&(0x7f00000000c0)='/selinux/status\x00', 0x40, 0x0, &(0x7f0000000180)={0x7079, 0x81, 0x6, 0x1, 0xffff, 0x3, 0x3, 0xfffffffffffffffe})
r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
splice(r0, &(0x7f00000001c0), r1, &(0x7f0000000240), 0x26, 0x2)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080))
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r3 = getpid()
getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
sched_setscheduler(r3, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:13 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0)
write$P9_RSTAT(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="640000007d02000099752ef2005d0008005e6900000002000002040000000000000000002010000000000400000004000000000000000b002d6367726f750d7075736572160047504c73656c696e757876626f786e6574317070703108002d282d6e6f64"], 0x64)
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000]]}, 0x120)

[  907.093187] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  907.093187]    program syz-executor5 not setting count and/or reply_len properly
03:42:13 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000080))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:13 executing program 2:
clone(0x1000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1})
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x10800, 0x0)

03:42:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]]}, 0x120)

03:42:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]]}, 0x120)

03:42:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]]}, 0x120)

03:42:13 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={<r3=>0x0, @in6={{0xa, 0x4e21, 0x0, @ipv4={[], [], @local}, 0x5}}}, &(0x7f00000000c0)=0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r3, 0x8}, 0x8)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_destroy(r2)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
tee(r4, r1, 0x8, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000180))
io_setup(0x0, &(0x7f0000000040))
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:14 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
prlimit64(r0, 0xf, &(0x7f0000000000)={0x3, 0xce}, &(0x7f0000000080))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
epoll_create1(0x1000001)
flock(r0, 0x0)
r1 = gettid()
r2 = dup2(r0, r0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000940)={0x0, @aes256, 0x2, "c811e4956d70cfec"})
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000040)=0x2)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in=@dev, @in=@loopback}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8)
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000800)={<r3=>0x0, 0x51a, 0x4}, &(0x7f0000000840)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000880)={r3, 0x3ff}, &(0x7f00000008c0)=0x8)
write$P9_RLCREATE(r2, &(0x7f0000000900)={0x18, 0xf, 0x2, {{0x1, 0x0, 0x3}, 0x2}}, 0x18)
link(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00')
keyctl$setperm(0x5, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x20000400, 0x20000e78, 0x20000f90], 0x0, &(0x7f00000003c0), &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000ffffffff000000009502a3be84ac82b9a446cccd41e4b03307a997482d71c7bd07adee01ddcdc84ae841e845496ff30281b560baf95e9afbd2547cedc8662908e200a8686421c2911031b0601e625a1f982e063525a405aae9c902edb5e49735d5d1fd1d20b875bab1fa3f87cb19d080364342d32926aebe7b1bb254cdcda16e396a0e227c43a8a32aa67a1a7dd93f8d72fdde2e6ab3537fa2e49d20d5760d9783d9df30e9e19a86f051793ce5eafcac6f5ab534038ad430158e81b12cf6ba814b950a06ee67ae0ff4abc950c41c157d74a652846eea3b9acd25dc44270b9e0feeeecea4b52947a729156879ab2171ff46223aae5f82b0b237dd84f688cea0a3"]}, 0x200)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000200))
kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x67af})
preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0)
ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000280)={0xffffffffffffff50, 0x0, 0x0, 0x0, 0x81, 0xffffffff7fffffff})
tkill(r1, 0xa)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x3, r2})
r5 = syz_open_dev$loop(&(0x7f00000007c0)='/dev/loop#\x00', 0x1, 0x4080)
fcntl$getown(r5, 0x9)

03:42:16 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002300)='/dev/mixer\x00', 0x141000, 0x0)
getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000002340)={@rand_addr, @loopback, @multicast2}, &(0x7f0000002380)=0xc)

03:42:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]]}, 0x120)

03:42:16 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00')
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x4, 0x7]}, &(0x7f00000000c0)=0x8)
madvise(&(0x7f0000c24000/0x3000)=nil, 0x3000, 0x4000000000000008)
clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040))
madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008)

03:42:16 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={<r2=>0x0, 0xfffffffffffffd3c}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x5, 0x6, [0x80000001, 0x4, 0x6, 0x3f, 0x6, 0x0]}, &(0x7f0000000100)=0x14)
r3 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

03:42:16 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth1_to_bond\x00', 0x2})
tee(r3, r1, 0x8, 0x0)
syz_read_part_table(0x6, 0x7, &(0x7f0000000640)=[{&(0x7f0000000200)="7d67ba768d227705eef793d6603bac792e76cbc130786dc776144f9294b9f816f5826f6e69ef4c768c95eafea79fe4c872e61f49bcf39c9c614e404996e047a4396f4b4c3415a63931f50264c0fbd4a288030c9ff1c3c958c58de137fe25792756b92c493cd2fd4093eab79823f0e8301d6fb0ef9aad89352c3108a0bac407e4e29af044f8eb00c1188003842b747e785ece98c72851daf4d6b49c10837b8fa2d759c11ad9334c74a55924d697ff0754011a60bf9de7cc1fa7d961c5ffd4094205ceebd70507df", 0xc7}, {&(0x7f00000000c0)="a0c5b72740", 0x5, 0x7}, {&(0x7f0000000300)="29fe67b9b7b4dd1f5fc936885214c685c5b24cd34526dabeaba31cc3f7d662c5e906f76b22fa46a2b7efad571d7e70c96beac23036f58daa7610db09304a3c9184d1f173e3a606ac4b837914f15f560af0691eda6f2196aaffd638ae8927d27420dcc1a4fe87", 0x66, 0x6}, {&(0x7f0000000400)="9d4cfc77979d8a0086660965ff3ee4c244e5052a986f171468398e8a05493d9f417c48193ec0176a46", 0x29, 0x200}, {&(0x7f0000000440)="8cf40b7e67d6aeb04e3c0dac49d133e1952f7a5963efec9ebf9d8568f2064d319b9c9997dfb31fddb3e687dd6fa4060f1e18ad373df4dc7b153cb560d5e5d3db52421ad57ae6f5e5ed4773ba98fd20ebfa775958ffa5acbe0e7b527ed214029ca3853108c8b48ae67e025409d478b03fc447251c7c8ba8ea3a79793d40070c65985b554578728d75da5f58667ebaedcf3d3a911f291b91427295bc38998c81e99f3cae85325d190fefb6d7ce5916836144a909ed45aa56daa83d16e45221231cfc752d3660d2fb19dbb6d304d9318379", 0xd0, 0x3766}, {&(0x7f0000000540)="fb3c8dc2fdf4c3f5ff57008ea8dd0e54f7d1ba2380927e580e3bd944e0a755001999cf34fa755f0ec03086d336e487c715ecaf1b38b55466f29eb192a24cea9e5cec926814293a69e9a4af240244f8cf7a6a56c748063e259da37ea4e2a70bab14bea6a32b88456e66638630ae7856cf9f186e09c3c4835f89856981a26e2374a4c338b7e4f2de59f449449d98becf94d281573f771a1ce3ffa090dddbc072d809a6e5fc2bce661e7ede9664dc36af1fd362179e0b", 0xb5, 0x8}, {&(0x7f0000000600)="7441fa0731c744b9c2d87f3f5f0a01", 0xf, 0x5}])
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7)

03:42:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]]}, 0x120)

03:42:16 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=<r0=>0x0)
ioprio_set$pid(0x1, r0, 0x2b1)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:16 executing program 2:
clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600]]}, 0x120)

03:42:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]]}, 0x120)

03:42:16 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl$sock_proto_private(r0, 0x89e4, &(0x7f0000000000)="46504c454b4e304f04b7896e515d0b47c0c1f6d729df2306bb738f5a4cb660ba680d1885e92256ad3a135e32a94ff0a8a54ae21d49c2f1310e464239698a0430a9dc9019b72d656711112d8f6e3051d4c5bd72399e24a33dc0bb9bc66994d1809996475390bcb136f66ffc7a8ce9c509dae0b188aae0")
r1 = epoll_create1(0x0)
flock(r0, 0x1)
r2 = gettid()
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

[  910.371482] sg_write: 7 callbacks suppressed
[  910.371498] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  910.371498]    program syz-executor5 not setting count and/or reply_len properly
03:42:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]]}, 0x120)

03:42:16 executing program 2:
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x1c1042)
name_to_handle_at(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x81, 0x8, "b725585edbab69c456cc7c2d446df5545bf47bfac1f8fb9a7b397bf4ca57aa48feb3e799d07c2648435df5563fd42d4477d9d793f616900b0a3e90e6f14a7e739f0a721c9cb7a24b20a70fdfcf5cfce7aed1dddeeec9d1aee64c25513f16418ca3e3787d09f5dc79ee3dfd240f8f6a26e044160567dee3785c"}, &(0x7f00000001c0), 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:16 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
get_robust_list(r0, &(0x7f0000000240)=&(0x7f00000001c0)={&(0x7f0000000080)={&(0x7f0000000000)}, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)}}, &(0x7f0000000280)=0x18)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  910.476565] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  910.476565]    program syz-executor5 not setting count and/or reply_len properly
03:42:16 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, &(0x7f0000000000)="88", 0x1, 0x20000004, &(0x7f0000000140)={0x2, 0x4004e23, @local}, 0x10)
shutdown(r2, 0x1)

03:42:17 executing program 2:
r0 = getpid()
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x10000)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000240)={{0x2, 0x2, 0x3, 0xe6, 'syz0\x00', 0x100}, 0x5, 0x3, 0x1, r0, 0x4, 0xd0, 'syz1\x00', &(0x7f0000000040)=['\x00', '%\'.wlan0mime_type/bdev\x00', '(&(!eth1\x00', 'wlan0\x00'], 0x27, [], [0x7ff, 0x0, 0x3, 0x7]})
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]]}, 0x120)

03:42:17 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
flock(r0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:17 executing program 4:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xc438, 0x20500)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:17 executing program 1:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, [], [{0x10001, 0xf4, 0x0, 0x0, 0x10000}, {0x0, 0x4}], [[], []]})

03:42:17 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
flock(r3, 0xc)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]]}, 0x120)

[  910.996793] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  910.996793]    program syz-executor5 not setting count and/or reply_len properly
03:42:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]]}, 0x120)

03:42:17 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
sched_setscheduler(r0, 0x5, &(0x7f0000000240)=0x800)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x20800, 0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000000c0)=r2)
write$selinux_create(r1, &(0x7f0000000180)=@access={'system_u:object_r:systemd_notify_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x1}, 0x4f)

[  911.067200] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  911.067200]    program syz-executor5 not setting count and/or reply_len properly
03:42:17 executing program 1:
prctl$intptr(0x1d, 0xfffffffffffff0a7)
prctl$void(0x1e)

03:42:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]]}, 0x120)

[  911.143061] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  911.143061]    program syz-executor5 not setting count and/or reply_len properly
03:42:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]]}, 0x120)

[  911.217661] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  911.217661]    program syz-executor5 not setting count and/or reply_len properly
03:42:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]]}, 0x120)

[  911.293121] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  911.293121]    program syz-executor5 not setting count and/or reply_len properly
03:42:17 executing program 2:
r0 = timerfd_create(0x6, 0x80800)
readahead(r0, 0x8, 0x0)
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
open_by_handle_at(r0, &(0x7f00000001c0)={0x1008, 0x7, "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"}, 0x10000)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000180)=0x5)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f00000000c0)=0x2b, 0x3, 0x2080)
ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000000080)={&(0x7f0000000000)="f82b834f186d996c665ff4ab220a5c76c844", 0x12})

[  911.375181] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  911.375181]    program syz-executor5 not setting count and/or reply_len properly
03:42:17 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r4, &(0x7f0000000880)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/70, 0x46}, 0x40002000)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

[  911.548105] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0
[  911.648008] print_req_error: I/O error, dev loop0, sector 640
03:42:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]]}, 0x120)

03:42:17 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20001, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0xffffffff80000001})
socket$nl_netfilter(0x10, 0x3, 0xc)

03:42:17 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
setpriority(0x2, r1, 0x9bf)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x13, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000040))
tkill(r1, 0x1000000000016)

03:42:17 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:17 executing program 1:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x124, 0x22002)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {r2, 0x80}, {r3, 0x28}, {r4, 0x95f6}], 0x4, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x3}, 0x8)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]]}, 0x120)

[  911.987269] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  911.987269]    program syz-executor5 not setting count and/or reply_len properly
03:42:18 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@dev}, &(0x7f00000000c0)=0x14)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x6, 0x81)

03:42:18 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0xd5, 0x0, 0x8, 0x800, 0x9, 0x80000000, 0x8, 0x4, <r2=>0x0}, &(0x7f0000000180)=0x20)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x100000000, 0x4, [0x9, 0xff, 0x8, 0xa8cf]}, 0x10)
r3 = dup(0xffffffffffffff9c)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000240)={0x1, 0x0, @pic={0x597, 0x8000, 0x8000, 0x2, 0x4, 0x7fffffff, 0x4, 0x9, 0x200, 0xd5fa, 0x1, 0x0, 0x1, 0x7fff, 0x9, 0x5}})
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
flock(r4, 0x1)

03:42:18 executing program 1:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x124, 0x22002)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {r2, 0x80}, {r3, 0x28}, {r4, 0x95f6}], 0x4, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x3}, 0x8)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  912.110984] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  912.110984]    program syz-executor5 not setting count and/or reply_len properly
03:42:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]]}, 0x120)

03:42:18 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x402000)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  912.339308] print_req_error: I/O error, dev loop0, sector 0
03:42:18 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
write$P9_RRENAME(r3, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
write$P9_RGETATTR(r3, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x28, {0x1, 0x1, 0x6}, 0x2c, r4, r5, 0x6, 0x10001, 0x4, 0x1, 0x8, 0x7, 0x7fff, 0x4, 0x5, 0x9, 0x100000000, 0x6, 0x5, 0x9, 0x4}}, 0xa0)
tkill(r2, 0x13)

03:42:18 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_destroy(r2)
tee(r0, r1, 0x8, 0xb)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:18 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x1)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x6, 0x10000000000, 0x1fffffffc0000, 0x101, 0x0, 0xf5, 0x40400, 0x4, 0x4, 0xce61, 0xffffffffffffff81, 0xff, 0x0, 0xffffffffffffff81, 0x4, 0x6, 0x7fffffff, 0x50, 0x3, 0x7, 0x3, 0x8, 0x5b, 0x9, 0x1000, 0x9, 0x8, 0xf822, 0x5, 0x7, 0x6dd7, 0x5, 0x7f, 0x3, 0x9, 0x54, 0x0, 0x5, 0x2, @perf_bp, 0x20, 0x6, 0x10001, 0x0, 0xb35f, 0x8001, 0x6}, r0, 0x1, r1, 0xb)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]]}, 0x120)

03:42:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]]}, 0x120)

03:42:21 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:21 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000100)="271200", 0x3)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140))
r1 = getpid()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0)
ioctl$void(r2, 0x5451)
timer_create(0x2, &(0x7f0000000040)={0x0, 0x32, 0x6, @tid=r1}, &(0x7f0000000080))
timer_create(0x7, &(0x7f0000000380)={0x0, 0x27, 0x6, @tid=r1}, &(0x7f00000003c0)=<r3=>0x0)
timer_getoverrun(r3)
sched_setscheduler(r1, 0x5, &(0x7f0000000200))
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={<r4=>0x0, 0x200, 0x1, 0x4000000007f}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={r4, 0xfffffffffffffd71, "d53f52571cf9cf331f2d891601729b4b932d84b4401fdd6be9bb55ec74241190d510071d63bb5866c2ca94b5181c6b98d31f9720df89fbde08b197e911eee43594ca7fa1e5b5be274cfb36b5fa2149b4a8851195c3f25e9954076f568c655b9b1d426b6b839a329bf8774e2d38dc74ed07b8d11dc53652a2b956290d1f49d71f2023d7e48e4e9c29a71e1ae8dccdbbb10b8d927e2d6fe8afa214c780018a06d4a86dd5ce39b9ece7d7161f6ffac1a3e4db46f4ff78a54926c08d461c6a12"}, &(0x7f0000000340)=0xc6)

03:42:21 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:21 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x80000)
flock(r1, 0x1)
r2 = gettid()
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:21 executing program 1:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x124, 0x22002)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {r2, 0x80}, {r3, 0x28}, {r4, 0x95f6}], 0x4, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x3}, 0x8)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff]]}, 0x120)

03:42:21 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r4, &(0x7f0000000880)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/70, 0x46}, 0x40002000)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]]}, 0x120)

03:42:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36]]}, 0x120)

03:42:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600000000000000]]}, 0x120)

03:42:21 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x40000, 0x0)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4)
getpid()
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
getsockname(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000000)=0x80)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000240)={0x0, 0x0, 0xb46})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000280)={0x0, 0x80000})
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000180)=@hopopts={0x8, 0x7, [], [@jumbo={0xc2, 0x4, 0xffff}, @calipso={0x7, 0x18, {0x8, 0x4, 0x4f, 0x1, [0x8, 0x2]}}, @ra={0x5, 0x2, 0xbfcf}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}]}, 0x48)

03:42:21 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000000)=0x80000000, 0x4)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]]}, 0x120)

[  915.446135] sg_write: 7 callbacks suppressed
[  915.446151] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  915.446151]    program syz-executor5 not setting count and/or reply_len properly
[  915.557209] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0
[  915.665884] print_req_error: I/O error, dev loop0, sector 128
03:42:22 executing program 0:
r0 = epoll_create1(0x80000)
flock(r0, 0x1)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000002140)='/selinux/mls\x00', 0x0, 0x0)
r2 = fcntl$getown(r0, 0x9)
getresuid(&(0x7f0000002180)=<r3=>0x0, &(0x7f00000021c0), &(0x7f0000002200))
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000002240)={0x20, 0x200, r2, 0x8, r3, 0x3ff, 0x7fffffff, 0xd4da})
r4 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
splice(r0, &(0x7f0000002280), r0, &(0x7f00000022c0), 0x5, 0x2)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
ioctl$KVM_GET_NESTED_STATE(r5, 0xc080aebe, &(0x7f0000000040)={0x0, 0x0, 0x2080})
r6 = socket$inet6(0xa, 0x1, 0x0)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x0)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000002000))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r8, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc)
setsockopt$inet_tcp_int(r8, 0x6, 0x8, &(0x7f0000000080)=0xfffffffffffffffc, 0x4)
close(r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
dup3(r6, r7, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f00000020c0)={{0x5, 0x8be}, 0x1, 0x3ff, 0x2832dc25, {0x8, 0x40}, 0x9, 0x1})
tkill(r4, 0x1000000000016)

03:42:22 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
r1 = dup(0xffffffffffffffff)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36000000]]}, 0x120)

03:42:22 executing program 4:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0)
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_destroy(r3)
tee(r4, r2, 0x8, 0x0)
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000400)=ANY=[@ANYRES32=<r6=>0x0, @ANYBLOB="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"], &(0x7f0000000040)=0xbb)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0xb98, 0x100000, 0x8001, 0x5, 0x75, 0x4, 0x6, 0xf0d8, r6}, 0x20)

03:42:22 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
rmdir(&(0x7f0000000080)='./file0\x00')
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x200, 0x0)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000002c0)=""/84)
ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000200)={&(0x7f0000000180)="9caf12d3dc434e2144dc00f2c8edde2b694a7cc74c5690ea7664be160fc2f286d236d9", 0x23})
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8040, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x2d1}, 0x10)
getpriority(0x3, r0)
splice(0xffffffffffffffff, &(0x7f0000000100), r2, &(0x7f0000000140), 0x3, 0x80)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000240)={0x5, 0x755, 0x7, 0xde54, 0x2}, 0x14)

[  916.151598] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  916.151598]    program syz-executor5 not setting count and/or reply_len properly
[  916.211390] Unknown ioctl -2146941692
[  916.234430] Unknown ioctl -2146941692
03:42:22 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r4, &(0x7f0000000880)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/70, 0x46}, 0x40002000)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600]]}, 0x120)

03:42:22 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000000), 0x3, 0x80)
sched_yield()
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40000, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000000c0)=0x54)

03:42:22 executing program 2:
socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e)
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000200))

03:42:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]]}, 0x120)

[  916.383460] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  916.383460]    program syz-executor5 not setting count and/or reply_len properly
03:42:22 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x11, 0x0, @thr={&(0x7f0000000000)="699edaa6dabecbf1413ef8442343dea63c3c2a", &(0x7f0000000040)="8f8d12f0cc9cceb3b4d696c72f58dc9aa147d2467e9b8b16a7d4d4c8f65304f1c429816067aff3adeac716df7a066393290bbd4ca6614242190913b34bcb60cec078afc046a07551d5257c05950367f841bbc278a320fade1bb83b460921469cc664db932b2163bddb1095ed8955ea13ce8f80b5a675f6808ec86d4d6c67cd8ba756d537e3cacf69"}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0xd3dab9d53a14970, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:22 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x101, 0x80000)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000180))
r2 = open(&(0x7f0000000000)='./file0\x00', 0x660040, 0x0)
ioctl$int_in(r2, 0x0, &(0x7f0000000280)=0x7)
write$P9_RREMOVE(r2, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7)
kcmp(r0, r0, 0x6, r2, r2)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0)={0x0, <r3=>0x0, 0xfffffffffffffc01})
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000240)={r3})

[  916.490508] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  916.490508]    program syz-executor5 not setting count and/or reply_len properly
[  916.737568] print_req_error: I/O error, dev loop0, sector 768
03:42:23 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x44, 0x5, {"bbafc51989ce9dbe601a8b176cc7c488df220c53a5f09849bd2e57ba950f7a1af8fca69efa1a56eb3ac1"}}, {0x0, "d457dc9fc291ee46326edfed8b2d1cae087dca9a32a27c2e441480d8a64f4d379b0165508ed16256a46402e77f7efb87d58378577b8aa57e92ad7ee520112a30e913260229b23fe03b9ff00f8d0d45f0e51a9e5b6daf33e5563d1a910c458a30ef497ad5667ba65304fe9f59c2bf87bfcd2a76bfbdfa5a1aa4c2d0e901ddcdd4d73f4da9908e70a55b2c684d0e82f0a8ccd373c468c857c65705a0e2ced87ebf196f08ad36577673130543f927601a7c69f27138afa244c717302e0766e5920daf8c6229afe72a36db31c3ec868a09253646609b54a7b594a9843e1f04a3263d928699342c3ef1b749e4b479a6d5345adc"}}, &(0x7f0000000240)=""/36, 0x137, 0x24, 0x1}, 0x20)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
keyctl$session_to_parent(0x12)
r3 = getpgrp(r1)
setpgid(r1, r3)
tkill(r1, 0x1000000000016)
sched_getaffinity(r1, 0x8, &(0x7f00000000c0))
socket$netlink(0x10, 0x3, 0xf)

03:42:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6]]}, 0x120)

03:42:23 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x5, 0x1f})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1, 0x100000000, 0x0, 0x0, r0}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000100)=0x9)
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:23 executing program 2:
clone(0x100000080020000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  917.121293] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  917.121293]    program syz-executor5 not setting count and/or reply_len properly
03:42:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]]}, 0x120)

[  917.213223] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  917.213223]    program syz-executor5 not setting count and/or reply_len properly
03:42:23 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000480))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$update(0x2, r2, &(0x7f0000000180)="39925c62f0d47297865dafdfcf3d3ec50bfd53e2f048fbc17d4372653c68f63ed28d53e9bd999e9f5e2a34489c433589d4f7ada49f89c0fb786ee815caaa4631ddd206d8ef5e41a127", 0x49)
sendfile(r1, r1, &(0x7f0000000280)=0x4, 0x200)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x1, 0x0)

03:42:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]]}, 0x120)

03:42:23 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r4, &(0x7f0000000880)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/70, 0x46}, 0x40002000)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:23 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f000001d000), 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r3, 0x6)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept(r3, 0x0, &(0x7f0000000000))
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000280)=""/130, &(0x7f0000000000)=0x82)
io_destroy(r2)
tee(0xffffffffffffffff, r1, 0x8, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:23 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00')
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={<r2=>0x0, 0x1}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x10000}, 0x8)

[  917.450985] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  917.450985]    program syz-executor5 not setting count and/or reply_len properly
[  917.687034] print_req_error: I/O error, dev loop0, sector 768
03:42:25 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600000000000000]]}, 0x120)

03:42:25 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00')
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={<r2=>0x0, 0x1}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x10000}, 0x8)

[  919.674291] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  919.674291]    program syz-executor5 not setting count and/or reply_len properly
03:42:26 executing program 0:
r0 = epoll_create1(0x80003)
flock(r0, 0x4)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc)=<r2=>0x0)
timer_gettime(r2, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x0, &(0x7f0000000140)={{r3, r4+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000000180))
timer_settime(r2, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f00000000c0))
tkill(r1, 0x2d)
perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x880, 0x1000, 0x8, 0x56d3, 0x0, 0x5, 0x0, 0x1, 0x9, 0x7662, 0x5, 0x6, 0x9, 0x5, 0x800, 0x3, 0x2, 0x7fff, 0x3800000000, 0x401, 0x5, 0x4, 0x9, 0x7, 0x8, 0x1, 0x2, 0x8000, 0x5, 0xffffffffffffff80, 0x5688cd81, 0x8, 0xffffffff, 0x0, 0x10000, 0x20, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x10, 0x5, 0x135, 0x7, 0x4cc, 0x1, 0x5}, r1, 0x6, 0xffffffffffffffff, 0x2)

03:42:26 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
dup2(r0, r1)
timer_create(0x6, &(0x7f0000000000)={0x0, 0x23, 0x2, @tid=r2}, &(0x7f0000000040))
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:26 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_udplite(0x2, 0x2, 0x88)
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:26 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r4, &(0x7f0000000880)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/70, 0x46}, 0x40002000)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:26 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='smaps_rollup\x00')
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={<r2=>0x0, 0x1}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x10000}, 0x8)

03:42:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff]]}, 0x120)

03:42:26 executing program 2:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f000001d000), 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r3, 0x6)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept(r3, 0x0, &(0x7f0000000000))
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000280)=""/130, &(0x7f0000000000)=0x82)
io_destroy(r2)
tee(0xffffffffffffffff, r1, 0x8, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]]}, 0x120)

[  920.207719] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  920.207719]    program syz-executor5 not setting count and/or reply_len properly
[  920.292938] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  920.292938]    program syz-executor5 not setting count and/or reply_len properly
03:42:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]]}, 0x120)

03:42:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbf]]}, 0x120)

03:42:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]]}, 0x120)

03:42:26 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
r2 = open(&(0x7f0000000000)='./file0\x00', 0x400400, 0x20)
ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, 0xfffffffffffffffe)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:26 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

[  920.500129] sg_write: 2 callbacks suppressed
[  920.500144] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  920.500144]    program syz-executor5 not setting count and/or reply_len properly
03:42:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]]}, 0x120)

03:42:26 executing program 4:
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x55bd, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

[  920.610932] print_req_error: I/O error, dev loop0, sector 128
[  920.619800] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  920.619800]    program syz-executor5 not setting count and/or reply_len properly
03:42:27 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r4, &(0x7f0000000880)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/70, 0x46}, 0x40002000)
epoll_create1(0x0)

03:42:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]]}, 0x120)

03:42:27 executing program 3:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x681, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x4}, @in6={0xa, 0x4e20, 0xfff, @empty, 0x22}, @in6={0xa, 0x4e23, 0x10000, @loopback, 0x244}], 0x54)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = epoll_create1(0x0)
flock(r2, 0x1)
r3 = gettid()
r4 = socket(0x10, 0x6, 0x2)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc8040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04dd0000", @ANYRES16=r5, @ANYBLOB="00042bbd7000ffdbdf250900000008000400f33d000008000400ff010000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x40000)
dup2(r1, r2)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

03:42:27 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0)
ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000340))
pipe(&(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1004801}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x40)
io_setup(0x8, &(0x7f00000001c0)=<r4=>0x0)
getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x8001, &(0x7f0000000040)=0x2)
io_submit(r4, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
io_destroy(r4)
tee(r5, r2, 0x8, 0x0)
vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:27 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]]}, 0x120)

[  921.247475] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  921.247475]    program syz-executor5 not setting count and/or reply_len properly
03:42:27 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  921.331492] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  921.331492]    program syz-executor5 not setting count and/or reply_len properly
03:42:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]]}, 0x120)

[  921.372855] Unknown ioctl 21666
03:42:27 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {r2, r3+10000000}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:27 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

03:42:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff00000000]]}, 0x120)

[  921.416301] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  921.416301]    program syz-executor5 not setting count and/or reply_len properly
03:42:27 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  921.473721] Unknown ioctl 21666
[  921.506458] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  921.506458]    program syz-executor5 not setting count and/or reply_len properly
[  921.506529] Unknown ioctl 21666
[  921.593907] print_req_error: I/O error, dev loop0, sector 0
03:42:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6000000]]}, 0x120)

03:42:27 executing program 2:
clone(0x2182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000200))
socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept(r1, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, &(0x7f0000000140), 0x3, 0x80)

[  921.713182] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  921.713182]    program syz-executor5 not setting count and/or reply_len properly
[  921.790018] Unknown ioctl 21666
03:42:30 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_destroy(r1)
tee(r2, r2, 0x8, 0x0)
vmsplice(r3, &(0x7f0000000140), 0x0, 0xf)

03:42:30 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
recvmsg(r4, &(0x7f0000000880)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}], 0x1, &(0x7f0000000800)=""/70, 0x46}, 0x40002000)
flock(0xffffffffffffffff, 0x1)

03:42:30 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000000)={0x9})
tkill(r2, 0x1000000000016)

03:42:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]]}, 0x120)

03:42:30 executing program 2:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000400)={0xd3cf, 0xead, 0x2c7d, 0x0, 0x0, [], [], [], 0x2, 0x1d58ee41})
socket$rds(0x15, 0x5, 0x0)
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]]}, 0x120)

[  924.276557] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  924.276557]    program syz-executor5 not setting count and/or reply_len properly
[  924.360321] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  924.360321]    program syz-executor5 not setting count and/or reply_len properly
[  924.486069] print_req_error: I/O error, dev loop0, sector 0
03:42:30 executing program 0:
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
timerfd_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+30000000}, {0x77359400}}, &(0x7f0000000140))
r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x1)
ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000040)={0x3, 0x4000, 0x6, 0x5, 0x8140})
r5 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r5, 0x1000000000016)

03:42:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]]}, 0x120)

03:42:30 executing program 2:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x2)
r2 = epoll_create1(0x0)
flock(r2, 0x1)
r3 = gettid()
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{0x3, 0x6}, {0x7, 0x3}, 0x718, 0x3, 0x3})
dup2(r0, r2)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

03:42:30 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
ioctl(r3, 0x0, &(0x7f0000000180)="f211339a61c1d2325a641bed60b834a6f68f0ea599a1bffde4c7d9b52fbb2169f89b18c2e2c0c863973b572cee32438b86024ab12ebcd4f6018e98ad99690312e5df44e57a19d32d5d056bf4f4fa43abeaeac51ab24c589ece45")
tkill(r2, 0x1000000000016)

03:42:30 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]]}, 0x120)

[  924.686757] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  924.686757]    program syz-executor5 not setting count and/or reply_len properly
[  924.887474] print_req_error: I/O error, dev loop0, sector 520
03:42:31 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="06"}], 0x1, 0x0)

03:42:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]]}, 0x120)

03:42:31 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x80000)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
epoll_create1(0x80000)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x20012, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f0000000080))
socket$inet_udplite(0x2, 0x2, 0x88)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
write$P9_RLINK(r3, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7)
tkill(r2, 0x1000000000016)

03:42:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff00000000]]}, 0x120)

03:42:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff]]}, 0x120)

03:42:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]]}, 0x120)

03:42:31 executing program 0:
openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
r0 = epoll_create1(0x0)
flock(r0, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000016)

03:42:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]]}, 0x120)

03:42:31 executing program 2:
socketpair$inet(0x2, 0x0, 0x1, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'bond_slave_1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}})
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = epoll_create1(0x0)
flock(r2, 0x2)
r3 = epoll_create1(0x0)
flock(r3, 0x1)
r4 = gettid()
r5 = dup2(r1, r3)
write$binfmt_aout(r3, &(0x7f0000000240)={{0xcc, 0x20, 0x6, 0x116, 0x3d8, 0xec, 0x14b, 0xe1}, "fee58facfbef2433059c44f055b4184233f7859ad1f050c6a428176f3f0cbed300a60520e954c60b6cb1b5557db1ccdcaad29c21e5d0b2a8e567dc338930b6c6efa846eb3196450e5bce2c72196bc6800e41320a821373da24b70615251499a6ba6380eac42691937043721088abbc31690860b1348c0e2d1fce9cfcb97de52fadf241e3759a259bcf9f2499f1238685ea", [[], [], []]}, 0x3b1)
pipe(&(0x7f0000000600))
ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000000000))
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ptmx\x00', 0x801, 0x0)
tkill(r4, 0x1000000000016)

03:42:31 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600000000000000]]}, 0x120)

[  925.590978] sg_write: 5 callbacks suppressed
[  925.590993] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  925.590993]    program syz-executor5 not setting count and/or reply_len properly
03:42:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]]}, 0x120)

[  925.650684] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  925.650684]    program syz-executor5 not setting count and/or reply_len properly
[  925.712454] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  925.712454]    program syz-executor5 not setting count and/or reply_len properly
[  925.837150] print_req_error: I/O error, dev loop0, sector 512
03:42:32 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000]]}, 0x120)

03:42:32 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x100000000)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

[  926.288288] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  926.288288]    program syz-executor5 not setting count and/or reply_len properly
03:42:34 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
clock_gettime(0x0, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)

03:42:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]]}, 0x120)

03:42:34 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:34 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:34 executing program 0:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:34 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f80)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {0x8000, 0xd442, 0x60b, 0x3}, 0x3e, [0x4, 0xfffffffffffffffe, 0x1, 0x1, 0x3f, 0x3, 0x1, 0x6, 0x0, 0x7ff, 0x7, 0x7, 0x6, 0xffff, 0x6, 0x1, 0xffff, 0x8, 0x4, 0x4, 0xc88, 0x9, 0x5034, 0x800, 0x7, 0x4, 0x1, 0x100, 0x40, 0x4, 0xd46, 0x4, 0x6, 0x1ce, 0xfffffffffffffffd, 0x5645, 0x3, 0x65, 0x9, 0x1000, 0x6, 0x1, 0xffffffff, 0x4, 0x5, 0x9, 0x1, 0xea1, 0x10001, 0xd7d, 0x1, 0x7f, 0x5b, 0x8, 0x0, 0x1f, 0x6, 0x8, 0x7ff, 0x7, 0x4, 0x6d37d3ef, 0xdf, 0x140], [0xf1, 0x5, 0x69c0, 0x7f3, 0x7ff, 0x5, 0x5, 0xffffffffffff176d, 0x80000001, 0x0, 0x0, 0x10000, 0x8, 0x3, 0x200, 0x3ff, 0x800, 0x9, 0x9, 0x6, 0x1, 0x2, 0x2, 0x2, 0x1, 0x3, 0x8b2, 0x1000, 0x3, 0x1200000, 0x7ff, 0x9582, 0x800, 0x3, 0xffff, 0x7, 0xffff, 0x9e73, 0x1f, 0xfffffffffffeffff, 0x3, 0x9, 0xfa, 0x7fff, 0xffffffff, 0x5, 0x8, 0x1f, 0x0, 0x3, 0x81, 0x3, 0x10000, 0x100000000000000, 0x0, 0x3, 0x10001, 0xfffffffffffffffe, 0x8, 0x76ed42cb, 0x101, 0x9, 0x9, 0x2000000000000000], [0x40, 0x7ff, 0x3, 0xffffffffffff0000, 0x0, 0x8000, 0x1, 0x4, 0x9, 0x6, 0x6, 0x76, 0x6, 0x9, 0x39b7, 0x22b, 0x0, 0x6, 0x8f, 0x4, 0x100, 0x0, 0x4d, 0xe16, 0x9, 0x8001, 0x9, 0x9, 0x5, 0x2f1, 0x0, 0x4, 0x4, 0xffffffffffffffc1, 0x3, 0x2, 0x1f, 0xe82a, 0x401, 0x9, 0x6, 0x2, 0x4, 0x3, 0x8, 0x6, 0x1, 0x8, 0xfff, 0x10, 0x10001, 0x100000001, 0x1d, 0x5, 0x6, 0x81, 0x22, 0x7, 0x7fb, 0x400, 0x20, 0x6, 0x6722e201, 0x7], [0x100, 0x1, 0x80000001, 0x57, 0x9, 0x0, 0x2, 0x8, 0x6, 0xc2, 0x4a0c, 0x5, 0x2b24, 0x3e, 0x3, 0x8, 0x40, 0x0, 0x7, 0xfee, 0xfffffffffffff801, 0x0, 0xd13, 0x400, 0x3, 0x3, 0x2, 0x4, 0xfff, 0x8, 0xcf, 0x7, 0x1ff, 0x2, 0x6, 0x81, 0x6, 0x0, 0x6, 0x8000, 0x9, 0x3, 0x200, 0x5, 0x7e2a, 0x0, 0x4, 0x100, 0x3e7ca3ba, 0x3ff, 0x401, 0x0, 0x3, 0xa32, 0x80, 0xffff, 0x8, 0x4, 0x80, 0x0, 0x800, 0x2, 0x5, 0x10000]}, 0x45c)
r2 = openat$cgroup_int(r0, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0)
sendfile(r2, r3, &(0x7f0000000140), 0x1)
pipe(&(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
io_destroy(r6)
tee(r7, r5, 0x8, 0x0)
vmsplice(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)

03:42:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600]]}, 0x120)

[  928.221014] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  928.221014]    program syz-executor5 not setting count and/or reply_len properly
[  928.226136] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0
03:42:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]]}, 0x120)

[  928.376238] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  928.376238]    program syz-executor5 not setting count and/or reply_len properly
03:42:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6]]}, 0x120)

[  928.460208] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0
[  928.486682] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  928.486682]    program syz-executor5 not setting count and/or reply_len properly
03:42:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]]}, 0x120)

[  928.556536] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  928.556536]    program syz-executor5 not setting count and/or reply_len properly
03:42:34 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
set_mempolicy(0xc003, &(0x7f0000000000)=0x8, 0x93b1)

03:42:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]]}, 0x120)

[  928.622854] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  928.622854]    program syz-executor5 not setting count and/or reply_len properly
[  928.707680] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  928.707680]    program syz-executor5 not setting count and/or reply_len properly
03:42:37 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0xfffffffffffffc6e}], 0x1, 0x0)

03:42:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6000000]]}, 0x120)

03:42:37 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x60000000, 0x3, 0x17})
flock(r1, 0x1)
r3 = gettid()
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000080)={<r4=>0x0, @in6={{0xa, 0x4e23, 0x2, @remote, 0x7fffffff}}, 0x9, 0x10001, 0x100000000, 0x565}, &(0x7f0000000140)=0x98)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000180)={r4, 0x7}, 0x8)
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r3, 0x1000000000016)

03:42:37 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:37 executing program 0:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:37 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

[  931.453611] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  931.453611]    program syz-executor5 not setting count and/or reply_len properly
03:42:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]]}, 0x120)

[  931.554451] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  931.554451]    program syz-executor5 not setting count and/or reply_len properly
[  931.589914] print_req_error: I/O error, dev loop0, sector 128
03:42:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]]}, 0x120)

03:42:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]]}, 0x120)

[  931.664102] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  931.664102]    program syz-executor5 not setting count and/or reply_len properly
03:42:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36000000]]}, 0x120)

[  931.746570] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  931.746570]    program syz-executor5 not setting count and/or reply_len properly
03:42:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]]}, 0x120)

[  931.820305] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  931.820305]    program syz-executor5 not setting count and/or reply_len properly
03:42:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]]}, 0x120)

[  931.881316] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  931.881316]    program syz-executor5 not setting count and/or reply_len properly
[  931.939334] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  931.939334]    program syz-executor5 not setting count and/or reply_len properly
03:42:38 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
io_destroy(r2)
fstatfs(r1, &(0x7f0000000400)=""/141)
tee(r3, r1, 0x8, 0x0)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000040)=0x3e, 0x4)
getsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000280)=""/185, &(0x7f0000000000)=0xb9)

03:42:38 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x80000)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
perf_event_open(&(0x7f00000030c0)={0x0, 0x70, 0x6, 0x2, 0x1, 0x4752, 0x0, 0x2, 0x0, 0x3, 0x3, 0x401, 0x2, 0x1f, 0x100000000, 0x7fffffff, 0x866, 0x7, 0x10002000000000, 0x1, 0xa14, 0xffffffff, 0x1, 0x7, 0x6, 0x8001, 0x5, 0xf4a0, 0x0, 0x9, 0xc29, 0x71b1, 0x6, 0xaa6, 0x52, 0x3, 0x63d80000000, 0xfffffffffffffffd, 0x0, 0x3, 0x6, @perf_config_ext={0x1ddc, 0xffffffffffff8000}, 0x4, 0x123, 0x4, 0x7, 0x7, 0xbfa, 0x9}, r2, 0x1, r3, 0x8)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
io_setup(0x10001, &(0x7f0000000840)=<r4=>0x0)
io_submit(r4, 0xa, &(0x7f0000003040)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000000880)="febb52af57fe2c283a2a9ed8b92bcbe88ddfdafa55266821867364482c8b3506ffd49320d91c6158990c2f2c8d4d89064c41df5034cc943aae05a70a94c23775a1c43294c8a1237e98547cdcf84886e7990353c49ddfdcf47db13256a3563f2bfb97a22020ace0b5b26f8dc57e66f64a19a2f887c8018a2e6a1e2d69602727dfaaa6d0c5fff8308f6a7643", 0x8b, 0x8, 0x0, 0x1, r3}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000000980)="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", 0x1000, 0x8, 0x0, 0x1, r1}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x7, 0x4, r1, &(0x7f00000019c0)="64f7cdf7851141b56618125da02daec3bc855e8ae49564053c08c6106109fb921390249f7c355f704497b61b6e5899c800b653bc4c195e568ba0fb80c2d9a9d6e792b34989f68ba078ba6a1b4b7d6aec2e77371137902b8386e3c35122397b5d9e3a6c40592492c4d013db669f6db7e0f58f7084264314465ade87a5f178dca4f07348f218b5e9d5d81ac82dd5cd134d445034e7bdb16f498a", 0x99, 0x1, 0x0, 0x0, r3}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000001ac0)="ffa4597effba3e4d95bc80023a5bdffdd3689f3d11956ba0e52b45617afade10c3f57085f9eb04c76b8628435da5d7754a0e220dc366137bad3f7cd6e73e9e4d7421f229f26eac3664f0c24f0e6906aaaa0278dd3b35a9713c706b9355e0d2543c2a4214ce6a1d9ecae817fafe9f8f19dee0e1669ad388897baa676d372b51ff5969da8d54c8afe2f29e40e7c1db7b9c7ca4c437844e797bc87c9cd058f7851cb943ba807bb7e327a0cd9d1d79a876a4178d7a70c6", 0xb5, 0x2, 0x0, 0x2, r3}, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000001bc0)="e005e3c559e1bed3b4ce4e3ec8450f537db26d025720ac73d9079b58a57add90ef92b74e0b07c54f57846ace2b8444ceca9d13a0c9c1d6c31ae94563fca5211ded4e99b0", 0x44, 0x86e, 0x0, 0x1, r1}, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x8, 0x8, r1, &(0x7f0000001c80)="71cc426caffab34ae53f2d4f03441d582488aee15863f68ea53784a52d2d670f72f078f42513b66f078aaa725f011d5338d5e874ea9449f6b7eeb20d693be0a4fed503c896aa3366f8c3f86541eb5894dd5b34c6df99d817ab4337c643a1749ab0a6cb7ac3220712ae9a48a7cc68bffd152c7469c7de09c7d2205ccddd1ce592eb5c53fca85e3ddaaa54954180283fe21c5aaa1a0a", 0x95, 0x1ebe, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000001d80)="721c3dc5d9de4000796fc830d7ef8597e4841097c6dc2c5da1e212cc32abaa423190b1a9fc93fb971f346a0acb81bf504748412c5aa95684a8c3dec7755573f51cbc1574c4710abb8f977a85c1e22072abfe6ce504bb770916b3861c37d77393e3fa2b82679ec51b40c00bc55d676ebf6f1d08", 0x73, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f0000001e40)="7f7e37", 0x3, 0x8, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x3, 0x7d60, r0, &(0x7f0000001ec0)="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", 0x1000, 0x9, 0x0, 0x0, r3}, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x6, 0x81, r1, &(0x7f0000002f00)="cac949036339ef306a513cf6221981b6dfe6afc6f065d9615c3f5a2a0b2187b902e1096f5fa651bece6af56f16005e30f28e7c97872831cf2f47354b6329206c0cf58a1d19a627c67b093603801b42c1604bde31fff1724e973b433a41607359af2df72b24f9bf31061b11969693ddd3b96705bb8b7179a061f8081f114f27c591ebbdcdb7aca1f0565f35cdcc60c9d90e273f1879f8639b055e3580ab7b34b15d76717ce41f0c9319599c8b6f681431a1053eaf704283ab4c519be98493cdeea3273e0feb38ba5682c485a19dc586e0b20916be7942", 0xd6, 0xba9a, 0x0, 0x0, r3}])
timer_create(0x7, &(0x7f0000003180)={0x0, 0x2f, 0x4, @thr={&(0x7f0000000000)="a611b3c7370d519d71dc4ae449a2167f8a3d6a27b9548ea86eabd9566ed538507c900cabbdbaeb12545553249960c811bba9caaec072aaa818b333a33d477cf5565c11dea950dcbf058a91350d5007e36cf834efd98e25b12256f42b2349f9721e33180c191a0830e03da752e4b46c2df636eb37b98e3d002a40dd58de27b1b04423ebd2a8155c749e1fd379f2bd6141680e0daec0b2e549f3b321bdc12bf3ef902ccf", &(0x7f00000000c0)="eb362deb2ef68d45e08b7b8d6a904229e279dc8368b5c0a0ab88537f01689b552318eec1bcb14027f9d81be1679a6d76491e65271e93e6d02ede93fcd5b6b55a0b4990f77e6c9483f4bd924c0c99446e73cdb23d63112252f23df3ef4b8f1e759cad91546631c37b8a0c35dc0562a9e27d1a681bf2d5606bf6895b571d3bb4ae3b31d415079ef19b323dbc70853f7c703d7246fa4ce23d042a7c40b4fb22daafa4ee349eb67ebc612038d3e3c36c326e58e177b1d524b757"}}, &(0x7f00000031c0))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r2, 0x1000000000016)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000640)={<r5=>0x0, 0x3}, &(0x7f0000000680)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000006c0)={<r6=>0x0, 0xb, "eca0d76c913a50b4796795"}, &(0x7f0000000700)=0x13)
sendmsg$inet_sctp(r3, &(0x7f0000000800)={&(0x7f0000000280)=@in6={0xa, 0x4e21, 0xc00000000000000, @local, 0x3}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000002c0)="cc99896263a0b5e6d4e413295f0aa2874fa946828256f5a966ace66c6d51e8732279fe1305fb5ef2f95680dfb1c0bd25ce8c252d1fff5c56a681294ba10e87a47e98d124", 0x44}, {&(0x7f0000000340)="3495c6bd5fb6e54e526a4d9734ed259d5dccc3eb1ddd66c1f72588915c074d78984f9149358bcd51e01f79f8e1fe7c6d8755abad538dea440b4c8b0bec1b39e448032daf672dc6df213c9d752c8087b48000b3826e4196b3fe87f2e01afebc193efd07e167cbd504c64a86aafa7984", 0x6f}, {&(0x7f00000003c0)="c1961ec7ced6d4df10f96d7ef88cd60f6cd2d4f64b30e3ec89fed9a4ff50ee03c5ab91b3d6ad0834617acd8f0da8b90384078b407fb15ee2f1b41517b17b3174aae933bd09ff4648ff98171f79bb4d444d03b3e722c3b178e5a6a27c6cd196247b36f8decb3898bd3ae10010c0561fea4305c4931f012d960e4ba6286270fc12cdcf729d12012634db3ae5df05495009c83fea7794fe18d14d58c8dd93879d20c3bc4ba49670c9dfd5ddd95dcf9e79e03478acbe88ef147626f02db12b", 0xbd}, {&(0x7f0000000480)="0c428a5c85a56dc186146658479ad3ae743f9424bbc8d7072142c04727837540819a43eb2183726e4937b99af45566be63c5a4c133d4a7eed282ff8f9b69ab936439a5e355e13aa250e854ddf79f75e5b096f68abd57312cfd4c", 0x5a}, {&(0x7f0000000500)="2960eb170bc36f2989ed5472c87a49e17196e950a8e895de52edbc2f84547c34fbdd58b903c3ec60b88541a55de7847092f2e349cea08a08aaa617fd2902fb88de4ec8aa6e16934e7f3f0393cfb9e1171a441d1bcf44932a57cf64c9584400b110a784383c08819ba6e20302d52062544b89b0383ad18f7663cccf736c8fee0bf3a1289966683b09d9cab15bafbc69937a5c8233ed1c55471dc0732658603053790426c6a1e6fda6fc128d7539f6280f1d5fbddaecf34a1aab74", 0xba}], 0x5, &(0x7f0000000740)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0xd6}}, @sndrcv={0x30, 0x84, 0x1, {0x743, 0x80000000, 0x4, 0x8, 0x8, 0x1, 0x14, 0x2, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x8000, 0x2, 0x3, r6}}, @init={0x18, 0x84, 0x0, {0x6, 0x200, 0x0, 0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0xb8, 0x4c000}, 0x44)
ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000240))
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffa000/0x3000)=nil, 0x3000})
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
bind$packet(r3, &(0x7f0000003140)={0x11, 0xe, r7, 0x1, 0x4a5, 0x6, @local}, 0x14)

03:42:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]]}, 0x120)

03:42:38 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:38 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

[  932.452143] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  932.452143]    program syz-executor5 not setting count and/or reply_len properly
03:42:38 executing program 0 (fault-call:4 fault-nth:0):
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:42:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]]}, 0x120)

03:42:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]]}, 0x120)

[  932.625581] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  932.625581]    program syz-executor5 not setting count and/or reply_len properly
03:42:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]]}, 0x120)

[  932.689424] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  932.689424]    program syz-executor5 not setting count and/or reply_len properly
03:42:38 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
r3 = dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x4, @thr={&(0x7f0000000000)="5403bc58b0fa", &(0x7f0000000040)="76014681c555acd97f895bc560bffbbe15b3bb2b4961"}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={<r4=>0x0, 0x400, 0x100, 0x9}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x5, 0x8, 0x400, r4}, &(0x7f0000000140)=0x10)
tkill(r2, 0x1000000000016)

03:42:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]]}, 0x120)

03:42:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]]}, 0x120)

03:42:38 executing program 4:
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x8000000000008, &(0x7f0000001600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}])
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10)
syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000300)='./file1\x00', 0x8000000000000000, 0x1, &(0x7f0000000340)=[{&(0x7f0000001540)="5865780d9eeca36a797c978c31f9eb9824ef3961cb8b3fc36548ac64e8a6134f5d06dfd1b62d92d13bb437712446a191c703e94d625ed50f15a09cee969f2da91d156dec63804b960d0c69", 0x4b, 0xff}], 0x4, &(0x7f00000015c0)={[{@overriderock='overriderockperm'}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@map_acorn='map=acorn'}]})
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)={0x10c, r5, 0xfa29d714b1cb6fd6, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffffff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000014)
io_destroy(r2)
tee(r3, r1, 0x8, 0x0)
r6 = getegid()
ioctl$TUNSETGROUP(r1, 0x400454ce, r6)
vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="06", 0x1}], 0x1, 0x0)
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000400)=""/4096)

03:42:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]]}, 0x120)

03:42:39 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]]}, 0x120)

[  933.108054] ISOFS: Unable to identify CD-ROM format.
03:42:39 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:39 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:42:39 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:42:39 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]]}, 0x120)

[  933.367164] ISOFS: Unable to identify CD-ROM format.
03:42:39 executing program 4 (fault-call:6 fault-nth:0):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:39 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]]}, 0x120)

[  933.449612] print_req_error: I/O error, dev loop0, sector 128
[  933.695180] FAULT_INJECTION: forcing a failure.
[  933.695180] name failslab, interval 1, probability 0, space 0, times 0
[  933.706924] CPU: 1 PID: 13341 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  933.714205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  933.723549] Call Trace:
[  933.726134]  dump_stack+0x1c4/0x2b4
[  933.729755]  ? dump_stack_print_info.cold.2+0x52/0x52
[  933.734948]  should_fail.cold.4+0xa/0x17
[  933.739001]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  933.744098]  ? find_held_lock+0x36/0x1c0
[  933.748148]  ? graph_lock+0x170/0x170
[  933.751961]  ? graph_lock+0x170/0x170
[  933.755767]  ? check_preemption_disabled+0x48/0x200
[  933.760796]  ? find_held_lock+0x36/0x1c0
[  933.764875]  ? __lock_is_held+0xb5/0x140
[  933.768968]  ? ___might_sleep+0x1ed/0x300
[  933.773123]  ? arch_local_save_flags+0x40/0x40
[  933.777710]  ? debug_smp_processor_id+0x1c/0x20
[  933.782389]  ? perf_trace_lock+0x14d/0x7a0
[  933.786698]  ? sctp_transport_put+0x8c/0x1f0
[  933.791116]  ? sctp_transport_hold+0x20/0x20
[  933.795538]  __should_failslab+0x124/0x180
[  933.799783]  should_failslab+0x9/0x14
[  933.803591]  kmem_cache_alloc_trace+0x2d7/0x750
[  933.808273]  ? graph_lock+0x170/0x170
[  933.812089]  sctp_association_new+0x12f/0x22d0
[  933.816679]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  933.822240]  ? sctp_trans_elect_best+0x3d0/0x3d0
[  933.827017]  ? find_held_lock+0x36/0x1c0
[  933.831155]  ? sctp_has_association+0xf9/0x1ee
[  933.835755]  ? lock_downgrade+0x900/0x900
[  933.839909]  ? check_preemption_disabled+0x48/0x200
[  933.844962]  ? rcu_read_unlock_special.part.39+0x11f0/0x11f0
[  933.850776]  ? kasan_check_read+0x11/0x20
[  933.854945]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  933.860237]  ? rcu_bh_qs+0xc0/0xc0
[  933.863799]  ? sctp_v4_err+0xb60/0xb60
[  933.867701]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  933.873254]  ? selinux_sctp_bind_connect+0x115/0x250
[  933.878389]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  933.883950]  ? security_sctp_bind_connect+0x9a/0xc0
[  933.888990]  sctp_sendmsg_new_asoc+0x39c/0x11f0
[  933.893667]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  933.898867]  ? lock_downgrade+0x900/0x900
[  933.903019]  ? check_preemption_disabled+0x48/0x200
[  933.908052]  ? sctp_autobind+0x1f0/0x1f0
[  933.912120]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  933.917409]  ? rcu_bh_qs+0xc0/0xc0
[  933.920957]  ? check_preemption_disabled+0x48/0x200
[  933.925979]  ? lock_sock_nested+0x9a/0x120
[  933.930217]  ? lock_sock_nested+0x9a/0x120
[  933.934465]  ? sctp_endpoint_lookup_assoc+0x17f/0x290
[  933.939662]  sctp_sendmsg+0x18d9/0x1dd0
[  933.943652]  ? sctp_id2assoc+0x3e0/0x3e0
[  933.947742]  ? sock_has_perm+0x2bc/0x3e0
[  933.951973]  ? usercopy_warn+0x110/0x110
[  933.956086]  inet_sendmsg+0x1a1/0x690
[  933.959900]  ? ipip_gro_receive+0x100/0x100
[  933.964234]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  933.969775]  ? security_socket_sendmsg+0x94/0xc0
[  933.974535]  ? ipip_gro_receive+0x100/0x100
[  933.978869]  sock_sendmsg+0xd5/0x120
[  933.982591]  __sys_sendto+0x3d7/0x670
[  933.986471]  ? __ia32_sys_getpeername+0xb0/0xb0
[  933.991156]  ? wait_for_completion+0x8a0/0x8a0
[  933.995762]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  934.001351]  ? __sb_end_write+0xd9/0x110
[  934.005444]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  934.010995]  ? fput+0x130/0x1a0
[  934.014281]  ? do_syscall_64+0x9a/0x820
[  934.018277]  ? do_syscall_64+0x9a/0x820
[  934.022260]  ? lockdep_hardirqs_on+0x421/0x5c0
[  934.026849]  ? trace_hardirqs_on+0xbd/0x310
[  934.031174]  ? __ia32_sys_read+0xb0/0xb0
[  934.035244]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  934.040784]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  934.046157]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  934.051620]  __x64_sys_sendto+0xe1/0x1a0
[  934.055698]  do_syscall_64+0x1b9/0x820
[  934.059590]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  934.064968]  ? syscall_return_slowpath+0x5e0/0x5e0
[  934.069910]  ? trace_hardirqs_on_caller+0x310/0x310
[  934.074951]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  934.080002]  ? recalc_sigpending_tsk+0x180/0x180
[  934.085261]  ? kasan_check_write+0x14/0x20
[  934.089508]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  934.094367]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  934.099572] RIP: 0033:0x457679
[  934.102771] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  934.121682] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  934.129413] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  934.136690] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  934.143967] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  934.151239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  934.158510] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000000
03:42:41 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = epoll_create1(0x0)
flock(r1, 0x1)
r2 = gettid()
dup2(r0, r1)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000000)={r1, r0, 0x4})
tkill(r2, 0x1000000000016)

03:42:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]]}, 0x120)

03:42:41 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x16, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:42:41 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:41 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:42:41 executing program 4 (fault-call:6 fault-nth:1):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:41 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600000000000000]]}, 0x120)

[  935.989584] FAULT_INJECTION: forcing a failure.
[  935.989584] name failslab, interval 1, probability 0, space 0, times 0
[  936.001771] CPU: 0 PID: 13370 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  936.009060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  936.018423] Call Trace:
[  936.021047]  dump_stack+0x1c4/0x2b4
[  936.024707]  ? dump_stack_print_info.cold.2+0x52/0x52
[  936.029953]  should_fail.cold.4+0xa/0x17
[  936.034040]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  936.039157]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  936.044273]  ? lockdep_hardirqs_on+0x421/0x5c0
[  936.048869]  ? trace_hardirqs_on+0xbd/0x310
[  936.053198]  ? graph_lock+0x170/0x170
[  936.057011]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  936.062478]  ? graph_lock+0x170/0x170
[  936.066288]  ? kasan_check_write+0x14/0x20
[  936.070547]  ? find_held_lock+0x36/0x1c0
[  936.074623]  ? __lock_is_held+0xb5/0x140
[  936.078716]  ? ___might_sleep+0x1ed/0x300
[  936.082875]  ? arch_local_save_flags+0x40/0x40
[  936.087474]  ? memset+0x31/0x40
[  936.090766]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  936.096331]  __should_failslab+0x124/0x180
[  936.100581]  should_failslab+0x9/0x14
[  936.104400]  kmem_cache_alloc_trace+0x2d7/0x750
[  936.109088]  ? sctp_outq_flush+0x3360/0x3360
[  936.113506]  ? proc_do_uuid+0x270/0x270
[  936.117505]  flex_array_alloc+0x1f8/0x2b0
[  936.121671]  fa_alloc+0x24/0x80
[  936.124965]  sctp_stream_alloc_out+0x30/0x270
[  936.129481]  sctp_stream_init+0xf0/0x400
[  936.133547]  ? lockdep_init_map+0x9/0x10
[  936.137629]  sctp_association_new+0x13be/0x22d0
[  936.142321]  ? sctp_trans_elect_best+0x3d0/0x3d0
[  936.147106]  ? sctp_has_association+0xf9/0x1ee
[  936.151698]  ? lock_downgrade+0x900/0x900
[  936.155852]  ? check_preemption_disabled+0x48/0x200
[  936.160888]  ? rcu_read_unlock_special.part.39+0x11f0/0x11f0
[  936.166694]  ? kasan_check_read+0x11/0x20
[  936.170853]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  936.176141]  ? rcu_bh_qs+0xc0/0xc0
[  936.179689]  ? sctp_v4_err+0xb60/0xb60
[  936.183596]  ? selinux_sctp_bind_connect+0x115/0x250
[  936.188722]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  936.194271]  ? security_sctp_bind_connect+0x9a/0xc0
[  936.199308]  sctp_sendmsg_new_asoc+0x39c/0x11f0
[  936.203984]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  936.209183]  ? lock_downgrade+0x900/0x900
[  936.213336]  ? check_preemption_disabled+0x48/0x200
[  936.218383]  ? sctp_autobind+0x1f0/0x1f0
[  936.222459]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  936.227750]  ? rcu_bh_qs+0xc0/0xc0
[  936.231295]  ? check_preemption_disabled+0x48/0x200
[  936.236320]  ? lock_sock_nested+0x9a/0x120
[  936.240575]  ? lock_sock_nested+0x9a/0x120
[  936.244841]  ? sctp_endpoint_lookup_assoc+0x17f/0x290
[  936.250045]  sctp_sendmsg+0x18d9/0x1dd0
[  936.254042]  ? sctp_id2assoc+0x3e0/0x3e0
[  936.258134]  ? sock_has_perm+0x2bc/0x3e0
[  936.262220]  ? usercopy_warn+0x110/0x110
[  936.266307]  inet_sendmsg+0x1a1/0x690
[  936.270123]  ? ipip_gro_receive+0x100/0x100
[  936.274465]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  936.280052]  ? security_socket_sendmsg+0x94/0xc0
[  936.284831]  ? ipip_gro_receive+0x100/0x100
[  936.289176]  sock_sendmsg+0xd5/0x120
[  936.292904]  __sys_sendto+0x3d7/0x670
[  936.296721]  ? __ia32_sys_getpeername+0xb0/0xb0
[  936.301415]  ? wait_for_completion+0x8a0/0x8a0
[  936.306033]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  936.311595]  ? __sb_end_write+0xd9/0x110
[  936.315672]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  936.321213]  ? fput+0x130/0x1a0
[  936.324505]  ? do_syscall_64+0x9a/0x820
[  936.328491]  ? do_syscall_64+0x9a/0x820
[  936.332480]  ? lockdep_hardirqs_on+0x421/0x5c0
[  936.337086]  ? trace_hardirqs_on+0xbd/0x310
[  936.341418]  ? __ia32_sys_read+0xb0/0xb0
[  936.345497]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  936.351043]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  936.356421]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  936.361903]  __x64_sys_sendto+0xe1/0x1a0
[  936.365987]  do_syscall_64+0x1b9/0x820
[  936.369882]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  936.375257]  ? syscall_return_slowpath+0x5e0/0x5e0
[  936.380200]  ? trace_hardirqs_on_caller+0x310/0x310
[  936.385227]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  936.390254]  ? recalc_sigpending_tsk+0x180/0x180
[  936.395017]  ? kasan_check_write+0x14/0x20
[  936.399271]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  936.404136]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  936.409332] RIP: 0033:0x457679
[  936.412535] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  936.431447] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
03:42:42 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]]}, 0x120)

[  936.439169] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  936.446446] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  936.453720] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  936.460991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  936.468263] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000001
[  936.496005] print_req_error: I/O error, dev loop0, sector 768
03:42:42 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)

03:42:42 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x223, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

[  936.650838] sg_write: 9 callbacks suppressed
[  936.650854] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  936.650854]    program syz-executor5 not setting count and/or reply_len properly
03:42:42 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
epoll_create1(0x0)

03:42:42 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff]]}, 0x120)

[  936.748416] print_req_error: I/O error, dev loop0, sector 0
[  936.797780] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  936.797780]    program syz-executor5 not setting count and/or reply_len properly
03:42:42 executing program 3:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
r1 = getpgrp(0xffffffffffffffff)
setpgid(r0, r1)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
r3 = epoll_create1(0x0)
flock(r3, 0x1)
r4 = gettid()
r5 = dup2(r2, r3)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180), &(0x7f00000001c0)}}, &(0x7f00009b1ffc))
ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000080)={0x7, 0xc6e})
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r4, 0x1000000000016)
ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f00000000c0)={0x96, 0x8})
write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000100)={0xe, 0x7, 0x7fffffff, 0x1da, 0x5e, "7a68d1e73ea291d4b165e0bdcd10b49d3cd7376b4c595dad7d1d40cdf97196f47d2254aeb3e02bf1de52dfec0f111fe3f6619bb039893cadc7e9c79d7afef3c3bd7c972e1ce10e470fd1d9de81233fc205be3df2811d59f08b1697df22ea"}, 0x6a)
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000040)=0x2)

03:42:42 executing program 4 (fault-call:6 fault-nth:2):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:42 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]]}, 0x120)

03:42:42 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  936.966725] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  936.966725]    program syz-executor5 not setting count and/or reply_len properly
03:42:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]]}, 0x120)

03:42:43 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

[  937.086307] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  937.086307]    program syz-executor5 not setting count and/or reply_len properly
[  937.104239] print_req_error: I/O error, dev loop0, sector 128
03:42:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36]]}, 0x120)

03:42:43 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:43 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x20000198, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

[  937.198877] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  937.198877]    program syz-executor5 not setting count and/or reply_len properly
03:42:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]]}, 0x120)

[  937.314116] FAULT_INJECTION: forcing a failure.
[  937.314116] name failslab, interval 1, probability 0, space 0, times 0
[  937.332203] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  937.332203]    program syz-executor5 not setting count and/or reply_len properly
[  937.358602] print_req_error: I/O error, dev loop0, sector 128
03:42:43 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:43 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600]]}, 0x120)

03:42:43 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  937.441102] CPU: 1 PID: 13454 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  937.448436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  937.457813] Call Trace:
[  937.460431]  dump_stack+0x1c4/0x2b4
[  937.464077]  ? dump_stack_print_info.cold.2+0x52/0x52
[  937.469292]  should_fail.cold.4+0xa/0x17
[  937.473365]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  937.478486]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  937.483594]  ? lockdep_hardirqs_on+0x421/0x5c0
[  937.488185]  ? trace_hardirqs_on+0xbd/0x310
[  937.492509]  ? graph_lock+0x170/0x170
[  937.496315]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  937.501769]  ? graph_lock+0x170/0x170
[  937.505569]  ? kasan_check_write+0x14/0x20
[  937.509821]  ? find_held_lock+0x36/0x1c0
[  937.513907]  ? __lock_is_held+0xb5/0x140
[  937.517995]  ? ___might_sleep+0x1ed/0x300
[  937.522150]  ? arch_local_save_flags+0x40/0x40
[  937.526734]  ? memset+0x31/0x40
[  937.530019]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  937.535570]  __should_failslab+0x124/0x180
[  937.539825]  should_failslab+0x9/0x14
[  937.543632]  kmem_cache_alloc_trace+0x2d7/0x750
[  937.548313]  ? sctp_outq_flush+0x3360/0x3360
[  937.552729]  ? proc_do_uuid+0x270/0x270
[  937.556721]  flex_array_alloc+0x1f8/0x2b0
[  937.560879]  fa_alloc+0x24/0x80
[  937.564167]  sctp_stream_alloc_out+0x30/0x270
[  937.568675]  sctp_stream_init+0xf0/0x400
[  937.572742]  ? lockdep_init_map+0x9/0x10
[  937.576815]  sctp_association_new+0x13be/0x22d0
[  937.581498]  ? sctp_trans_elect_best+0x3d0/0x3d0
[  937.586278]  ? sctp_has_association+0xf9/0x1ee
[  937.590865]  ? lock_downgrade+0x900/0x900
[  937.595019]  ? check_preemption_disabled+0x48/0x200
[  937.600046]  ? rcu_read_unlock_special.part.39+0x11f0/0x11f0
[  937.605843]  ? kasan_check_read+0x11/0x20
[  937.609997]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  937.615276]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  937.620038]  ? rcu_bh_qs+0xc0/0xc0
[  937.623598]  ? selinux_sctp_bind_connect+0x115/0x250
[  937.628718]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  937.634261]  ? security_sctp_bind_connect+0x9a/0xc0
[  937.639294]  sctp_sendmsg_new_asoc+0x39c/0x11f0
[  937.643968]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  937.649169]  ? lock_downgrade+0x900/0x900
[  937.653321]  ? check_preemption_disabled+0x48/0x200
[  937.658352]  ? sctp_autobind+0x1f0/0x1f0
[  937.662432]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  937.667716]  ? rcu_bh_qs+0xc0/0xc0
[  937.671260]  ? check_preemption_disabled+0x48/0x200
[  937.676280]  ? lock_sock_nested+0x9a/0x120
[  937.680515]  ? lock_sock_nested+0x9a/0x120
[  937.684779]  ? sctp_endpoint_lookup_assoc+0x17f/0x290
[  937.689978]  sctp_sendmsg+0x18d9/0x1dd0
[  937.693970]  ? sctp_id2assoc+0x3e0/0x3e0
[  937.698048]  ? sock_has_perm+0x2bc/0x3e0
[  937.702132]  ? usercopy_warn+0x110/0x110
[  937.706207]  inet_sendmsg+0x1a1/0x690
[  937.710015]  ? ipip_gro_receive+0x100/0x100
[  937.714356]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  937.719903]  ? security_socket_sendmsg+0x94/0xc0
[  937.724667]  ? ipip_gro_receive+0x100/0x100
[  937.729002]  sock_sendmsg+0xd5/0x120
[  937.732740]  __sys_sendto+0x3d7/0x670
[  937.736557]  ? __ia32_sys_getpeername+0xb0/0xb0
[  937.741241]  ? wait_for_completion+0x8a0/0x8a0
[  937.745846]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  937.751416]  ? __sb_end_write+0xd9/0x110
[  937.755496]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  937.761039]  ? fput+0x130/0x1a0
[  937.764328]  ? do_syscall_64+0x9a/0x820
[  937.768307]  ? do_syscall_64+0x9a/0x820
[  937.772288]  ? lockdep_hardirqs_on+0x421/0x5c0
[  937.776877]  ? trace_hardirqs_on+0xbd/0x310
[  937.781206]  ? __ia32_sys_read+0xb0/0xb0
[  937.785282]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  937.790824]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  937.796207]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  937.801684]  __x64_sys_sendto+0xe1/0x1a0
[  937.805770]  do_syscall_64+0x1b9/0x820
[  937.809662]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  937.815031]  ? syscall_return_slowpath+0x5e0/0x5e0
[  937.819973]  ? trace_hardirqs_on_caller+0x310/0x310
[  937.824993]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  937.830012]  ? recalc_sigpending_tsk+0x180/0x180
[  937.834772]  ? kasan_check_write+0x14/0x20
[  937.839018]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  937.843887]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  937.849081] RIP: 0033:0x457679
[  937.852283] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  937.871205] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  937.878929] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  937.886203] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  937.893474] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  937.900755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  937.908027] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000002
[  937.983898] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  937.983898]    program syz-executor5 not setting count and/or reply_len properly
[  938.108873] print_req_error: I/O error, dev loop0, sector 0
03:42:44 executing program 4 (fault-call:6 fault-nth:3):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:44 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]]}, 0x120)

03:42:44 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0x3, {&(0x7f0000000040), r1}}, 0x18)

03:42:44 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:44 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:42:44 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:44 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]]}, 0x120)

[  938.204393] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  938.204393]    program syz-executor5 not setting count and/or reply_len properly
03:42:44 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbf]]}, 0x120)

[  938.334510] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  938.334510]    program syz-executor5 not setting count and/or reply_len properly
[  938.364935] print_req_error: I/O error, dev loop0, sector 768
03:42:44 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:44 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]]}, 0x120)

[  938.429709] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  938.429709]    program syz-executor5 not setting count and/or reply_len properly
03:42:44 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]]}, 0x120)

03:42:44 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600000000000000]]}, 0x120)

[  938.627694] print_req_error: I/O error, dev loop0, sector 256
[  938.749334] FAULT_INJECTION: forcing a failure.
[  938.749334] name failslab, interval 1, probability 0, space 0, times 0
[  938.777817] CPU: 0 PID: 13555 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  938.785128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  938.794491] Call Trace:
[  938.794548]  dump_stack+0x1c4/0x2b4
[  938.794574]  ? dump_stack_print_info.cold.2+0x52/0x52
[  938.794614]  should_fail.cold.4+0xa/0x17
[  938.810036]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  938.815147]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  938.820255]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  938.825366]  ? lockdep_hardirqs_on+0x421/0x5c0
[  938.829962]  ? graph_lock+0x170/0x170
[  938.833766]  ? _crng_backtrack_protect+0x10c/0x150
[  938.838703]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  938.844158]  ? graph_lock+0x170/0x170
[  938.847967]  ? do_raw_spin_lock+0xc1/0x200
[  938.852214]  ? find_held_lock+0x36/0x1c0
[  938.856281]  ? __lock_is_held+0xb5/0x140
[  938.860364]  ? ___might_sleep+0x1ed/0x300
[  938.864525]  ? arch_local_save_flags+0x40/0x40
[  938.869120]  ? proc_do_uuid+0x270/0x270
[  938.873124]  __should_failslab+0x124/0x180
[  938.877372]  should_failslab+0x9/0x14
[  938.881188]  kmem_cache_alloc_trace+0x2d7/0x750
[  938.885868]  ? get_random_bytes+0x34/0x40
[  938.890035]  sctp_transport_new+0x10a/0x880
[  938.894365]  ? sctp_transport_destroy_rcu+0x60/0x60
[  938.899397]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  938.904597]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  938.910201]  ? sctp_v4_scope+0x19b/0x1c0
[  938.914270]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  938.919480]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  938.924501]  ? sctp_in_scope+0xdb/0x140
[  938.928481]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  938.934020]  ? sctp_copy_one_addr+0x64/0x170
[  938.938446]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  938.943986]  ? sctp_bind_addr_copy+0x196/0x47c
[  938.948579]  sctp_assoc_add_peer+0x2ef/0x1100
[  938.953088]  ? sctp_assoc_set_pmtu+0x140/0x140
[  938.957681]  ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0
[  938.963412]  ? security_sctp_bind_connect+0x9a/0xc0
[  938.968483]  sctp_sendmsg_new_asoc+0x5da/0x11f0
[  938.973152]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  938.978372]  ? lock_downgrade+0x900/0x900
[  938.982532]  ? check_preemption_disabled+0x48/0x200
[  938.987561]  ? sctp_autobind+0x1f0/0x1f0
[  938.991626]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  938.996907]  ? rcu_bh_qs+0xc0/0xc0
[  939.000455]  ? check_preemption_disabled+0x48/0x200
[  939.005481]  ? lock_sock_nested+0x9a/0x120
[  939.009719]  ? lock_sock_nested+0x9a/0x120
[  939.013965]  ? sctp_endpoint_lookup_assoc+0x17f/0x290
[  939.019163]  sctp_sendmsg+0x18d9/0x1dd0
[  939.023155]  ? sctp_id2assoc+0x3e0/0x3e0
[  939.027231]  ? sock_has_perm+0x2bc/0x3e0
[  939.031308]  ? usercopy_warn+0x110/0x110
[  939.035391]  inet_sendmsg+0x1a1/0x690
[  939.039219]  ? ipip_gro_receive+0x100/0x100
[  939.043551]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  939.049091]  ? security_socket_sendmsg+0x94/0xc0
[  939.053849]  ? ipip_gro_receive+0x100/0x100
[  939.058177]  sock_sendmsg+0xd5/0x120
[  939.061898]  __sys_sendto+0x3d7/0x670
[  939.065709]  ? __ia32_sys_getpeername+0xb0/0xb0
[  939.070399]  ? wait_for_completion+0x8a0/0x8a0
[  939.075008]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  939.080561]  ? __sb_end_write+0xd9/0x110
[  939.084763]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  939.090301]  ? fput+0x130/0x1a0
[  939.093585]  ? do_syscall_64+0x9a/0x820
[  939.097564]  ? do_syscall_64+0x9a/0x820
[  939.101543]  ? lockdep_hardirqs_on+0x421/0x5c0
[  939.106132]  ? trace_hardirqs_on+0xbd/0x310
[  939.110462]  ? __ia32_sys_read+0xb0/0xb0
[  939.114537]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  939.120082]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  939.125459]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  939.130919]  __x64_sys_sendto+0xe1/0x1a0
[  939.134992]  do_syscall_64+0x1b9/0x820
[  939.138881]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  939.144271]  ? syscall_return_slowpath+0x5e0/0x5e0
[  939.149208]  ? trace_hardirqs_on_caller+0x310/0x310
[  939.154227]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  939.159259]  ? recalc_sigpending_tsk+0x180/0x180
[  939.164017]  ? kasan_check_write+0x14/0x20
[  939.168274]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  939.173143]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  939.178336] RIP: 0033:0x457679
[  939.181539] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  939.200449] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  939.208170] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  939.215444] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  939.222729] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  939.230000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  939.237271] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000003
[  939.246829] print_req_error: I/O error, dev loop0, sector 0
03:42:45 executing program 4 (fault-call:6 fault-nth:4):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:45 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:45 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff00000000]]}, 0x120)

03:42:45 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa03, {&(0x7f0000000040), r1}}, 0x18)

[  939.529370] FAULT_INJECTION: forcing a failure.
[  939.529370] name failslab, interval 1, probability 0, space 0, times 0
[  939.576348] CPU: 1 PID: 13594 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  939.583687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  939.593052] Call Trace:
[  939.595664]  dump_stack+0x1c4/0x2b4
[  939.599325]  ? dump_stack_print_info.cold.2+0x52/0x52
[  939.604548]  should_fail.cold.4+0xa/0x17
[  939.608628]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  939.613747]  ? graph_lock+0x170/0x170
[  939.617554]  ? sctp_hash_cmp+0x86/0x260
[  939.621533]  ? graph_lock+0x170/0x170
[  939.625339]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  939.630883]  ? graph_lock+0x170/0x170
[  939.634694]  ? find_held_lock+0x36/0x1c0
[  939.638763]  ? find_held_lock+0x36/0x1c0
[  939.642835]  ? __lock_is_held+0xb5/0x140
[  939.646918]  ? ___might_sleep+0x1ed/0x300
[  939.651073]  ? arch_local_save_flags+0x40/0x40
[  939.655666]  ? sctp_hash_transport+0x5e2/0x810
[  939.660265]  __should_failslab+0x124/0x180
[  939.664510]  should_failslab+0x9/0x14
[  939.668319]  kmem_cache_alloc_trace+0x2d7/0x750
[  939.672994]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  939.678199]  sctp_stream_init_ext+0x4f/0xf0
[  939.682530]  sctp_sendmsg_to_asoc+0x1a96/0x2310
[  939.687203]  ? memcpy+0x45/0x50
[  939.690492]  ? sctp_assoc_set_primary+0x274/0x310
[  939.695343]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  939.700895]  ? sctp_transport_lookup_process+0x1d0/0x1d0
[  939.706355]  ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0
[  939.712076]  ? security_sctp_bind_connect+0x9a/0xc0
[  939.717103]  ? sctp_sendmsg_new_asoc+0xc06/0x11f0
[  939.721955]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  939.727152]  ? lock_downgrade+0x900/0x900
[  939.731302]  ? check_preemption_disabled+0x48/0x200
[  939.736331]  ? sctp_autobind+0x1f0/0x1f0
[  939.740407]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  939.745693]  ? rcu_bh_qs+0xc0/0xc0
[  939.749238]  ? check_preemption_disabled+0x48/0x200
[  939.754258]  ? lock_sock_nested+0x9a/0x120
[  939.758495]  ? lock_sock_nested+0x9a/0x120
[  939.762749]  sctp_sendmsg+0x13f6/0x1dd0
[  939.766743]  ? sctp_id2assoc+0x3e0/0x3e0
[  939.770823]  ? sock_has_perm+0x2bc/0x3e0
[  939.774901]  ? usercopy_warn+0x110/0x110
[  939.778982]  inet_sendmsg+0x1a1/0x690
[  939.782791]  ? ipip_gro_receive+0x100/0x100
[  939.787124]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  939.792666]  ? security_socket_sendmsg+0x94/0xc0
[  939.797427]  ? ipip_gro_receive+0x100/0x100
[  939.801760]  sock_sendmsg+0xd5/0x120
[  939.805485]  __sys_sendto+0x3d7/0x670
[  939.809333]  ? __ia32_sys_getpeername+0xb0/0xb0
[  939.814012]  ? wait_for_completion+0x8a0/0x8a0
[  939.818619]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  939.824185]  ? __sb_end_write+0xd9/0x110
[  939.828259]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  939.833798]  ? fput+0x130/0x1a0
[  939.837096]  ? do_syscall_64+0x9a/0x820
[  939.841073]  ? do_syscall_64+0x9a/0x820
[  939.845054]  ? lockdep_hardirqs_on+0x421/0x5c0
[  939.849644]  ? trace_hardirqs_on+0xbd/0x310
[  939.853971]  ? __ia32_sys_read+0xb0/0xb0
[  939.858037]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  939.863581]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  939.868958]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  939.874436]  __x64_sys_sendto+0xe1/0x1a0
[  939.878517]  do_syscall_64+0x1b9/0x820
[  939.882416]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  939.887806]  ? syscall_return_slowpath+0x5e0/0x5e0
[  939.892742]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  939.897590]  ? trace_hardirqs_on_caller+0x310/0x310
[  939.902614]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  939.907636]  ? prepare_exit_to_usermode+0x291/0x3b0
[  939.912662]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  939.917521]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  939.922712] RIP: 0033:0x457679
[  939.925915] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  939.944825] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  939.952744] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  939.960014] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  939.967285] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
03:42:46 executing program 3:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:42:46 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]]}, 0x120)

03:42:46 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
read(r3, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:46 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:46 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa08, {&(0x7f0000000040), r1}}, 0x18)

[  939.974554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  939.981827] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000004
03:42:46 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]]}, 0x120)

03:42:46 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]]}, 0x120)

03:42:46 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  940.149666] print_req_error: I/O error, dev loop0, sector 384
[  940.337886] print_req_error: I/O error, dev loop0, sector 384
03:42:46 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]]}, 0x120)

03:42:46 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x8000a0}}, 0x18)

03:42:46 executing program 4 (fault-call:6 fault-nth:5):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:46 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  940.689393] FAULT_INJECTION: forcing a failure.
[  940.689393] name failslab, interval 1, probability 0, space 0, times 0
[  940.700984] CPU: 1 PID: 13677 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  940.708269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  940.717629] Call Trace:
[  940.720238]  dump_stack+0x1c4/0x2b4
[  940.723885]  ? dump_stack_print_info.cold.2+0x52/0x52
[  940.729090]  should_fail.cold.4+0xa/0x17
[  940.733146]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  940.738250]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  940.743389]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  940.748498]  ? lockdep_hardirqs_on+0x421/0x5c0
[  940.753078]  ? graph_lock+0x170/0x170
[  940.756891]  ? _crng_backtrack_protect+0x10c/0x150
[  940.761817]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  940.767268]  ? graph_lock+0x170/0x170
[  940.771077]  ? do_raw_spin_lock+0xc1/0x200
[  940.775327]  ? find_held_lock+0x36/0x1c0
[  940.779406]  ? __lock_is_held+0xb5/0x140
[  940.783487]  ? ___might_sleep+0x1ed/0x300
[  940.787646]  ? arch_local_save_flags+0x40/0x40
[  940.792239]  ? proc_do_uuid+0x270/0x270
[  940.796226]  __should_failslab+0x124/0x180
[  940.800473]  should_failslab+0x9/0x14
[  940.804281]  kmem_cache_alloc_trace+0x2d7/0x750
[  940.808964]  ? get_random_bytes+0x34/0x40
[  940.813129]  sctp_transport_new+0x10a/0x880
[  940.817461]  ? sctp_transport_destroy_rcu+0x60/0x60
[  940.822483]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  940.827680]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  940.833222]  ? sctp_v4_scope+0x19b/0x1c0
[  940.837289]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  940.842485]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  940.847506]  ? sctp_in_scope+0xdb/0x140
[  940.851486]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  940.857026]  ? sctp_copy_one_addr+0x64/0x170
[  940.861447]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  940.866990]  ? sctp_bind_addr_copy+0x196/0x47c
[  940.871588]  sctp_assoc_add_peer+0x2ef/0x1100
[  940.876098]  ? sctp_assoc_set_pmtu+0x140/0x140
[  940.880686]  ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0
[  940.886412]  ? security_sctp_bind_connect+0x9a/0xc0
[  940.891455]  sctp_sendmsg_new_asoc+0x5da/0x11f0
[  940.896128]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  940.901325]  ? lock_downgrade+0x900/0x900
[  940.905478]  ? check_preemption_disabled+0x48/0x200
[  940.910506]  ? sctp_autobind+0x1f0/0x1f0
[  940.914574]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  940.919859]  ? rcu_bh_qs+0xc0/0xc0
[  940.923408]  ? check_preemption_disabled+0x48/0x200
[  940.928430]  ? lock_sock_nested+0x9a/0x120
[  940.932672]  ? lock_sock_nested+0x9a/0x120
[  940.936922]  ? sctp_endpoint_lookup_assoc+0x17f/0x290
[  940.942124]  sctp_sendmsg+0x18d9/0x1dd0
[  940.946113]  ? sctp_id2assoc+0x3e0/0x3e0
[  940.950189]  ? sock_has_perm+0x2bc/0x3e0
[  940.954264]  ? usercopy_warn+0x110/0x110
[  940.958338]  inet_sendmsg+0x1a1/0x690
[  940.962148]  ? ipip_gro_receive+0x100/0x100
[  940.966488]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  940.972030]  ? security_socket_sendmsg+0x94/0xc0
[  940.976830]  ? ipip_gro_receive+0x100/0x100
[  940.981163]  sock_sendmsg+0xd5/0x120
[  940.984885]  __sys_sendto+0x3d7/0x670
[  940.988695]  ? __ia32_sys_getpeername+0xb0/0xb0
[  940.993375]  ? wait_for_completion+0x8a0/0x8a0
[  940.997993]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  941.003547]  ? __sb_end_write+0xd9/0x110
[  941.007619]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  941.013180]  ? fput+0x130/0x1a0
[  941.016467]  ? do_syscall_64+0x9a/0x820
[  941.020444]  ? do_syscall_64+0x9a/0x820
[  941.024437]  ? lockdep_hardirqs_on+0x421/0x5c0
[  941.029031]  ? trace_hardirqs_on+0xbd/0x310
[  941.033355]  ? __ia32_sys_read+0xb0/0xb0
[  941.037461]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  941.043005]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  941.048377]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  941.053850]  __x64_sys_sendto+0xe1/0x1a0
[  941.057927]  do_syscall_64+0x1b9/0x820
[  941.061823]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  941.067212]  ? syscall_return_slowpath+0x5e0/0x5e0
[  941.072151]  ? trace_hardirqs_on_caller+0x310/0x310
[  941.077177]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  941.082198]  ? recalc_sigpending_tsk+0x180/0x180
[  941.087434]  ? kasan_check_write+0x14/0x20
[  941.091683]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  941.096540]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  941.101735] RIP: 0033:0x457679
[  941.104940] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  941.123846] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  941.131563] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
03:42:47 executing program 3 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

03:42:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]]}, 0x120)

03:42:47 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  941.138834] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  941.146103] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  941.153372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  941.160665] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000005
03:42:47 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:47 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0xffffffffa0008000}}, 0x18)

03:42:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]]}, 0x120)

03:42:47 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  941.374694] FAULT_INJECTION: forcing a failure.
[  941.374694] name failslab, interval 1, probability 0, space 0, times 0
[  941.387178] CPU: 1 PID: 13696 Comm: syz-executor3 Not tainted 4.19.0-rc4+ #28
[  941.394478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  941.403845] Call Trace:
[  941.406457]  dump_stack+0x1c4/0x2b4
[  941.410112]  ? dump_stack_print_info.cold.2+0x52/0x52
[  941.415353]  should_fail.cold.4+0xa/0x17
[  941.419451]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  941.424572]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  941.430133]  ? graph_lock+0x170/0x170
[  941.433947]  ? check_preemption_disabled+0x48/0x200
[  941.438977]  ? graph_lock+0x170/0x170
[  941.442782]  ? debug_smp_processor_id+0x1c/0x20
[  941.442798]  ? perf_trace_lock+0x14d/0x7a0
[  941.442826]  ? find_held_lock+0x36/0x1c0
[  941.442849]  ? __lock_is_held+0xb5/0x140
[  941.442880]  ? ___might_sleep+0x1ed/0x300
[  941.464038]  ? arch_local_save_flags+0x40/0x40
[  941.468636]  ? mark_held_locks+0x130/0x130
[  941.472901]  __should_failslab+0x124/0x180
[  941.477159]  should_failslab+0x9/0x14
[  941.480976]  kmem_cache_alloc_trace+0x2d7/0x750
[  941.485663]  ? check_preemption_disabled+0x48/0x200
[  941.490722]  __kthread_create_on_node+0x137/0x540
[  941.495593]  ? loop_get_status64+0x140/0x140
[  941.500020]  ? __kthread_parkme+0x1a0/0x1a0
[  941.504402]  ? __lockdep_init_map+0x105/0x590
[  941.508915]  ? __lockdep_init_map+0x105/0x590
[  941.513433]  ? loop_get_status64+0x140/0x140
[  941.517857]  kthread_create_on_node+0xb1/0xe0
[  941.522367]  ? __kthread_create_on_node+0x540/0x540
[  941.527423]  ? kasan_check_read+0x11/0x20
[  941.531601]  lo_ioctl+0x7f6/0x1d80
[  941.535168]  ? lo_rw_aio_complete+0x470/0x470
[  941.539679]  blkdev_ioctl+0x9ac/0x2010
[  941.543600]  ? blkpg_ioctl+0xc10/0xc10
[  941.547502]  ? avc_ss_reset+0x190/0x190
[  941.551498]  ? rcu_read_unlock_special.part.39+0x11f0/0x11f0
[  941.557306]  ? kasan_check_read+0x11/0x20
[  941.561470]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  941.566776]  ? rcu_bh_qs+0xc0/0xc0
[  941.570361]  ? ___might_sleep+0x1ed/0x300
[  941.574536]  ? arch_local_save_flags+0x40/0x40
[  941.579150]  block_ioctl+0xee/0x130
[  941.582788]  ? blkdev_fallocate+0x400/0x400
[  941.587126]  do_vfs_ioctl+0x1de/0x1720
[  941.591034]  ? ioctl_preallocate+0x300/0x300
[  941.595467]  ? selinux_file_mprotect+0x620/0x620
[  941.600243]  ? __sb_end_write+0xd9/0x110
[  941.604324]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  941.609870]  ? fput+0x130/0x1a0
[  941.613165]  ? do_syscall_64+0x9a/0x820
[  941.617168]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  941.622730]  ? security_file_ioctl+0x94/0xc0
[  941.627153]  ksys_ioctl+0xa9/0xd0
[  941.630632]  __x64_sys_ioctl+0x73/0xb0
[  941.634538]  do_syscall_64+0x1b9/0x820
[  941.638440]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  941.643827]  ? syscall_return_slowpath+0x5e0/0x5e0
[  941.648779]  ? trace_hardirqs_on_caller+0x310/0x310
[  941.653808]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  941.658839]  ? recalc_sigpending_tsk+0x180/0x180
[  941.663606]  ? kasan_check_write+0x14/0x20
[  941.667861]  ? trace_hardirqs_off_thunk+0x1a/0x1c
03:42:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]]}, 0x120)

[  941.672726]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  941.677941] RIP: 0033:0x457679
[  941.681150] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  941.700061] RSP: 002b:00007f23c8970c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  941.707781] RAX: ffffffffffffffda RBX: 00007f23c89716d4 RCX: 0000000000457679
[  941.707792] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000003
[  941.707802] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[  941.707811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  941.707821] R13: 00000000004d0570 R14: 00000000004c059f R15: 0000000000000000
[  941.746714] sg_write: 10 callbacks suppressed
[  941.746730] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  941.746730]    program syz-executor5 not setting count and/or reply_len properly
03:42:47 executing program 4 (fault-call:6 fault-nth:6):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:47 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]]}, 0x120)

03:42:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]]}, 0x120)

[  941.872081] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  941.872081]    program syz-executor5 not setting count and/or reply_len properly
[  942.016293] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  942.016293]    program syz-executor5 not setting count and/or reply_len properly
03:42:48 executing program 3 (fault-call:2 fault-nth:1):
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

03:42:48 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]]}, 0x120)

03:42:48 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x300000000000000}}, 0x18)

[  942.153290] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  942.153290]    program syz-executor5 not setting count and/or reply_len properly
[  942.166475] FAULT_INJECTION: forcing a failure.
[  942.166475] name failslab, interval 1, probability 0, space 0, times 0
[  942.207635] CPU: 1 PID: 13748 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  942.214960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  942.224322] Call Trace:
[  942.226929]  dump_stack+0x1c4/0x2b4
[  942.230587]  ? dump_stack_print_info.cold.2+0x52/0x52
[  942.235810]  should_fail.cold.4+0xa/0x17
[  942.239885]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  942.244997]  ? graph_lock+0x170/0x170
[  942.248802]  ? sctp_hash_cmp+0x86/0x260
[  942.252780]  ? graph_lock+0x170/0x170
[  942.256617]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  942.262159]  ? graph_lock+0x170/0x170
[  942.265975]  ? find_held_lock+0x36/0x1c0
[  942.270043]  ? find_held_lock+0x36/0x1c0
[  942.274111]  ? __lock_is_held+0xb5/0x140
[  942.278193]  ? ___might_sleep+0x1ed/0x300
[  942.282348]  ? arch_local_save_flags+0x40/0x40
[  942.286952]  ? sctp_hash_transport+0x5e2/0x810
[  942.291548]  __should_failslab+0x124/0x180
[  942.295794]  should_failslab+0x9/0x14
[  942.299604]  kmem_cache_alloc_trace+0x2d7/0x750
[  942.304279]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  942.309489]  sctp_stream_init_ext+0x4f/0xf0
[  942.313821]  sctp_sendmsg_to_asoc+0x1a96/0x2310
[  942.318493]  ? memcpy+0x45/0x50
[  942.321782]  ? sctp_assoc_set_primary+0x274/0x310
[  942.326631]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  942.332182]  ? sctp_transport_lookup_process+0x1d0/0x1d0
[  942.337640]  ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0
[  942.343358]  ? security_sctp_bind_connect+0x9a/0xc0
[  942.348408]  ? sctp_sendmsg_new_asoc+0xc06/0x11f0
[  942.353263]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  942.358461]  ? lock_downgrade+0x900/0x900
[  942.362613]  ? check_preemption_disabled+0x48/0x200
[  942.367639]  ? sctp_autobind+0x1f0/0x1f0
[  942.371705]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  942.376985]  ? rcu_bh_qs+0xc0/0xc0
[  942.380526]  ? check_preemption_disabled+0x48/0x200
[  942.385547]  ? lock_sock_nested+0x9a/0x120
[  942.389784]  ? lock_sock_nested+0x9a/0x120
[  942.394037]  sctp_sendmsg+0x13f6/0x1dd0
[  942.398033]  ? sctp_id2assoc+0x3e0/0x3e0
[  942.402111]  ? sock_has_perm+0x2bc/0x3e0
[  942.406189]  ? usercopy_warn+0x110/0x110
[  942.410266]  inet_sendmsg+0x1a1/0x690
[  942.414075]  ? ipip_gro_receive+0x100/0x100
[  942.418414]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  942.423959]  ? security_socket_sendmsg+0x94/0xc0
[  942.428719]  ? ipip_gro_receive+0x100/0x100
[  942.433083]  sock_sendmsg+0xd5/0x120
[  942.436808]  __sys_sendto+0x3d7/0x670
[  942.440620]  ? __ia32_sys_getpeername+0xb0/0xb0
[  942.445300]  ? wait_for_completion+0x8a0/0x8a0
[  942.449903]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  942.455457]  ? __sb_end_write+0xd9/0x110
[  942.459531]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  942.465067]  ? fput+0x130/0x1a0
[  942.468351]  ? do_syscall_64+0x9a/0x820
[  942.472333]  ? do_syscall_64+0x9a/0x820
[  942.476314]  ? lockdep_hardirqs_on+0x421/0x5c0
[  942.480900]  ? trace_hardirqs_on+0xbd/0x310
[  942.485225]  ? __ia32_sys_read+0xb0/0xb0
[  942.489286]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  942.494827]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  942.500195]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  942.505659]  __x64_sys_sendto+0xe1/0x1a0
[  942.509731]  do_syscall_64+0x1b9/0x820
[  942.513622]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  942.518995]  ? syscall_return_slowpath+0x5e0/0x5e0
[  942.523931]  ? trace_hardirqs_on_caller+0x310/0x310
[  942.528964]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  942.533987]  ? recalc_sigpending_tsk+0x180/0x180
[  942.538749]  ? kasan_check_write+0x14/0x20
[  942.542993]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  942.547865]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  942.553056] RIP: 0033:0x457679
[  942.556254] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  942.575154] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  942.582868] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  942.590136] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  942.597421] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  942.604693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  942.611965] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000006
03:42:48 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:48 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:48 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbf]]}, 0x120)

03:42:48 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

03:42:48 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]]}, 0x120)

[  942.711550] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  942.711550]    program syz-executor5 not setting count and/or reply_len properly
[  942.815283] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  942.815283]    program syz-executor5 not setting count and/or reply_len properly
[  942.879972] print_req_error: I/O error, dev loop0, sector 896
03:42:49 executing program 4 (fault-call:6 fault-nth:7):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:49 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]]}, 0x120)

03:42:49 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x800000000000000}}, 0x18)

03:42:49 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x541b, r1)

03:42:49 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:49 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]]}, 0x120)

[  943.022124] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  943.022124]    program syz-executor5 not setting count and/or reply_len properly
03:42:49 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  943.106206] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  943.106206]    program syz-executor5 not setting count and/or reply_len properly
[  943.203276] print_req_error: I/O error, dev loop0, sector 0
[  943.337436] FAULT_INJECTION: forcing a failure.
[  943.337436] name failslab, interval 1, probability 0, space 0, times 0
[  943.348971] CPU: 0 PID: 13836 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  943.356254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  943.365606] Call Trace:
[  943.368186]  dump_stack+0x1c4/0x2b4
[  943.371818]  ? dump_stack_print_info.cold.2+0x52/0x52
[  943.376996]  ? lock_downgrade+0x900/0x900
[  943.381141]  should_fail.cold.4+0xa/0x17
[  943.385205]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  943.390312]  ? graph_lock+0x170/0x170
[  943.394125]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  943.399665]  ? check_preemption_disabled+0x48/0x200
[  943.404695]  ? check_preemption_disabled+0x48/0x200
[  943.409727]  ? print_usage_bug+0xc0/0xc0
[  943.413804]  ? print_usage_bug+0xc0/0xc0
[  943.417879]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  943.423530]  ? fib_table_lookup+0xa72/0x2420
[  943.427968]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  943.433514]  ? __lock_acquire+0x7ec/0x4ec0
[  943.437760]  ? print_usage_bug+0xc0/0xc0
[  943.441826]  ? fib_insert_alias+0x1250/0x1250
[  943.446338]  __should_failslab+0x124/0x180
[  943.450585]  should_failslab+0x9/0x14
[  943.454397]  kmem_cache_alloc_node+0x56/0x730
[  943.458917]  __alloc_skb+0x119/0x770
[  943.462633]  ? check_preemption_disabled+0x48/0x200
[  943.467657]  ? skb_scrub_packet+0x490/0x490
[  943.471984]  ? __kmalloc+0x25/0x760
[  943.475614]  ? mark_held_locks+0x130/0x130
[  943.479862]  ? sctp_bind_addrs_to_raw+0x118/0x370
[  943.484715]  ? sctp_bind_addrs_to_raw+0x239/0x370
[  943.489570]  ? sctp_del_bind_addr+0x350/0x350
[  943.494072]  _sctp_make_chunk+0x58/0x280
[  943.498143]  sctp_make_init+0x96f/0x11a0
[  943.502207]  ? zap_class+0x640/0x640
[  943.505941]  ? sctp_init_cause+0x2d0/0x2d0
[  943.510177]  ? lock_downgrade+0x900/0x900
[  943.514352]  ? find_held_lock+0x36/0x1c0
[  943.518448]  ? is_bpf_text_address+0xac/0x170
[  943.522948]  ? lock_downgrade+0x900/0x900
[  943.527101]  ? check_preemption_disabled+0x48/0x200
[  943.532125]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  943.537332]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  943.542875]  ? sctp_sm_lookup_event+0xf8/0x4b4
[  943.547479]  ? rcu_bh_qs+0xc0/0xc0
[  943.551028]  ? dccp_diag_dump+0x40/0x40
[  943.555003]  ? rcu_bh_qs+0xc0/0xc0
[  943.558558]  sctp_sf_do_prm_asoc+0xc1/0x360
[  943.562889]  sctp_do_sm+0x212/0x7450
[  943.566609]  ? kernel_text_address+0x79/0xf0
[  943.571031]  ? __kernel_text_address+0xd/0x40
[  943.575531]  ? unwind_get_return_address+0x61/0xa0
[  943.580472]  ? sctp_cname+0x1a0/0x1a0
[  943.584278]  ? sctp_do_8_2_transport_strike.isra.15+0x980/0x980
[  943.590348]  ? save_stack+0xa9/0xd0
[  943.593984]  ? save_stack+0x43/0xd0
[  943.597614]  ? kasan_kmalloc+0xc7/0xe0
[  943.601516]  ? kmem_cache_alloc_trace+0x152/0x750
[  943.606362]  ? sctp_stream_init_ext+0x4f/0xf0
[  943.610863]  ? sctp_sendmsg_to_asoc+0x1a96/0x2310
[  943.615704]  ? sctp_sendmsg+0x13f6/0x1dd0
[  943.619860]  ? inet_sendmsg+0x1a1/0x690
[  943.623852]  ? sock_sendmsg+0xd5/0x120
[  943.627751]  ? __sys_sendto+0x3d7/0x670
[  943.631728]  ? __x64_sys_sendto+0xe1/0x1a0
[  943.635968]  ? do_syscall_64+0x1b9/0x820
[  943.640034]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  943.645414]  ? find_held_lock+0x36/0x1c0
[  943.649501]  ? find_held_lock+0x36/0x1c0
[  943.653579]  ? graph_lock+0x170/0x170
[  943.657398]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  943.662952]  ? check_preemption_disabled+0x48/0x200
[  943.667973]  ? check_preemption_disabled+0x48/0x200
[  943.673002]  ? __lock_is_held+0xb5/0x140
[  943.677067]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  943.682610]  ? flex_array_get+0x1da/0x260
[  943.686823]  ? sctp_sched_fcfs_init_sid+0x9/0x10
[  943.691587]  ? sctp_sched_init_sid+0x18d/0x2c0
[  943.696171]  ? sctp_stream_init_ext+0x4f/0xf0
[  943.700676]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  943.705876]  sctp_primitive_ASSOCIATE+0x9d/0xd0
[  943.710558]  sctp_sendmsg_to_asoc+0xd50/0x2310
[  943.715148]  ? sctp_assoc_set_primary+0x274/0x310
[  943.720007]  ? sctp_transport_lookup_process+0x1d0/0x1d0
[  943.725466]  ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0
[  943.731182]  ? security_sctp_bind_connect+0x9a/0xc0
[  943.736210]  ? sctp_sendmsg_new_asoc+0xc06/0x11f0
[  943.741052]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  943.746252]  ? lock_downgrade+0x900/0x900
[  943.750416]  ? sctp_autobind+0x1f0/0x1f0
[  943.754487]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  943.759766]  ? rcu_bh_qs+0xc0/0xc0
[  943.763312]  ? check_preemption_disabled+0x48/0x200
[  943.768331]  ? lock_sock_nested+0x9a/0x120
[  943.772566]  ? lock_sock_nested+0x9a/0x120
[  943.776817]  sctp_sendmsg+0x13f6/0x1dd0
[  943.780805]  ? sctp_id2assoc+0x3e0/0x3e0
[  943.784884]  ? sock_has_perm+0x2bc/0x3e0
[  943.788959]  ? usercopy_warn+0x110/0x110
[  943.793035]  inet_sendmsg+0x1a1/0x690
[  943.796846]  ? ipip_gro_receive+0x100/0x100
[  943.801175]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  943.806712]  ? security_socket_sendmsg+0x94/0xc0
[  943.811475]  ? ipip_gro_receive+0x100/0x100
[  943.815801]  sock_sendmsg+0xd5/0x120
[  943.819521]  __sys_sendto+0x3d7/0x670
[  943.823329]  ? __ia32_sys_getpeername+0xb0/0xb0
[  943.828011]  ? wait_for_completion+0x8a0/0x8a0
[  943.832613]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  943.838165]  ? __sb_end_write+0xd9/0x110
[  943.842233]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  943.847774]  ? fput+0x130/0x1a0
[  943.851059]  ? do_syscall_64+0x9a/0x820
[  943.855035]  ? do_syscall_64+0x9a/0x820
[  943.859016]  ? lockdep_hardirqs_on+0x421/0x5c0
[  943.863603]  ? trace_hardirqs_on+0xbd/0x310
[  943.867926]  ? __ia32_sys_read+0xb0/0xb0
[  943.871989]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  943.877529]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  943.882897]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  943.888358]  __x64_sys_sendto+0xe1/0x1a0
[  943.892451]  do_syscall_64+0x1b9/0x820
[  943.896350]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  943.901744]  ? syscall_return_slowpath+0x5e0/0x5e0
[  943.906687]  ? trace_hardirqs_on_caller+0x310/0x310
[  943.911708]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  943.916728]  ? recalc_sigpending_tsk+0x180/0x180
[  943.921489]  ? kasan_check_write+0x14/0x20
[  943.925735]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  943.930591]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  943.935786] RIP: 0033:0x457679
[  943.938988] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  943.958297] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  943.966010] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  943.973280] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  943.980559] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
03:42:50 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:42:50 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600000000000000]]}, 0x120)

03:42:50 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0xc0481273, r1)

03:42:50 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:50 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x8000a0ffffffff}}, 0x18)

[  943.987827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  943.995093] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000007
[  944.058681] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  944.058681]    program syz-executor5 not setting count and/or reply_len properly
03:42:50 executing program 4 (fault-call:6 fault-nth:8):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:50 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x5451, r1)

03:42:50 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]]}, 0x120)

03:42:50 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:50 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600]]}, 0x120)

[  944.313206] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  944.313206]    program syz-executor5 not setting count and/or reply_len properly
03:42:50 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]]}, 0x120)

03:42:50 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  944.488065] print_req_error: I/O error, dev loop0, sector 512
[  944.686970] FAULT_INJECTION: forcing a failure.
[  944.686970] name failslab, interval 1, probability 0, space 0, times 0
[  944.698404] CPU: 1 PID: 13920 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  944.705689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  944.715035] Call Trace:
[  944.717640]  dump_stack+0x1c4/0x2b4
[  944.721287]  ? dump_stack_print_info.cold.2+0x52/0x52
[  944.726496]  should_fail.cold.4+0xa/0x17
[  944.730554]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  944.735655]  ? __save_stack_trace+0x8d/0xf0
[  944.739978]  ? save_stack+0xa9/0xd0
[  944.743595]  ? save_stack+0x43/0xd0
[  944.747209]  ? kasan_kmalloc+0xc7/0xe0
[  944.751082]  ? kasan_slab_alloc+0x12/0x20
[  944.755220]  ? kmem_cache_alloc_node+0x144/0x730
[  944.759967]  ? __alloc_skb+0x119/0x770
[  944.763845]  ? _sctp_make_chunk+0x58/0x280
[  944.768065]  ? sctp_make_init+0x96f/0x11a0
[  944.772286]  ? sctp_sf_do_prm_asoc+0xc1/0x360
[  944.776772]  ? sctp_do_sm+0x212/0x7450
[  944.780661]  ? sctp_primitive_ASSOCIATE+0x9d/0xd0
[  944.785515]  ? sctp_sendmsg_to_asoc+0xd50/0x2310
[  944.790265]  ? sctp_sendmsg+0x13f6/0x1dd0
[  944.794415]  ? inet_sendmsg+0x1a1/0x690
[  944.798392]  ? sock_sendmsg+0xd5/0x120
[  944.802274]  ? __sys_sendto+0x3d7/0x670
[  944.806261]  ? __x64_sys_sendto+0xe1/0x1a0
[  944.810501]  ? do_syscall_64+0x1b9/0x820
[  944.814563]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  944.819947]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  944.825490]  ? graph_lock+0x170/0x170
[  944.829295]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  944.834821]  ? check_preemption_disabled+0x48/0x200
[  944.839835]  ? check_preemption_disabled+0x48/0x200
[  944.844872]  __should_failslab+0x124/0x180
[  944.849118]  should_failslab+0x9/0x14
[  944.852926]  kmem_cache_alloc_node_trace+0x5a/0x740
[  944.857967]  __kmalloc_node_track_caller+0x33/0x70
[  944.862899]  __kmalloc_reserve.isra.39+0x41/0xe0
[  944.867652]  __alloc_skb+0x155/0x770
[  944.871355]  ? check_preemption_disabled+0x48/0x200
[  944.876371]  ? skb_scrub_packet+0x490/0x490
[  944.880705]  ? __kmalloc+0x25/0x760
[  944.884349]  ? mark_held_locks+0x130/0x130
[  944.888612]  ? sctp_bind_addrs_to_raw+0x118/0x370
[  944.893462]  ? sctp_bind_addrs_to_raw+0x239/0x370
[  944.898304]  ? sctp_del_bind_addr+0x350/0x350
[  944.902790]  _sctp_make_chunk+0x58/0x280
[  944.906842]  sctp_make_init+0x96f/0x11a0
[  944.910890]  ? zap_class+0x640/0x640
[  944.914623]  ? sctp_init_cause+0x2d0/0x2d0
[  944.918858]  ? lock_downgrade+0x900/0x900
[  944.923024]  ? find_held_lock+0x36/0x1c0
[  944.927110]  ? is_bpf_text_address+0xac/0x170
[  944.931619]  ? lock_downgrade+0x900/0x900
[  944.935766]  ? check_preemption_disabled+0x48/0x200
[  944.940787]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  944.945996]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  944.951538]  ? sctp_sm_lookup_event+0xf8/0x4b4
[  944.956124]  ? rcu_bh_qs+0xc0/0xc0
[  944.959670]  ? dccp_diag_dump+0x40/0x40
[  944.963650]  ? rcu_bh_qs+0xc0/0xc0
[  944.967223]  sctp_sf_do_prm_asoc+0xc1/0x360
[  944.971556]  sctp_do_sm+0x212/0x7450
[  944.975278]  ? kernel_text_address+0x79/0xf0
[  944.979711]  ? __kernel_text_address+0xd/0x40
[  944.984214]  ? unwind_get_return_address+0x61/0xa0
[  944.989153]  ? sctp_cname+0x1a0/0x1a0
[  944.992964]  ? sctp_do_8_2_transport_strike.isra.15+0x980/0x980
[  944.999038]  ? save_stack+0xa9/0xd0
[  945.002668]  ? save_stack+0x43/0xd0
[  945.006298]  ? kasan_kmalloc+0xc7/0xe0
[  945.010193]  ? kmem_cache_alloc_trace+0x152/0x750
[  945.015041]  ? sctp_stream_init_ext+0x4f/0xf0
[  945.019538]  ? sctp_sendmsg_to_asoc+0x1a96/0x2310
[  945.024386]  ? sctp_sendmsg+0x13f6/0x1dd0
[  945.028544]  ? inet_sendmsg+0x1a1/0x690
[  945.032525]  ? sock_sendmsg+0xd5/0x120
[  945.036438]  ? __sys_sendto+0x3d7/0x670
[  945.040431]  ? __x64_sys_sendto+0xe1/0x1a0
[  945.044672]  ? do_syscall_64+0x1b9/0x820
[  945.048740]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  945.054116]  ? find_held_lock+0x36/0x1c0
[  945.058188]  ? find_held_lock+0x36/0x1c0
[  945.062257]  ? graph_lock+0x170/0x170
[  945.066067]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  945.071607]  ? check_preemption_disabled+0x48/0x200
[  945.076627]  ? check_preemption_disabled+0x48/0x200
[  945.081661]  ? __lock_is_held+0xb5/0x140
[  945.086230]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  945.091774]  ? flex_array_get+0x1da/0x260
[  945.095932]  ? sctp_sched_fcfs_init_sid+0x9/0x10
[  945.100737]  ? sctp_sched_init_sid+0x18d/0x2c0
[  945.105322]  ? sctp_stream_init_ext+0x4f/0xf0
[  945.109829]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  945.115029]  sctp_primitive_ASSOCIATE+0x9d/0xd0
[  945.119710]  sctp_sendmsg_to_asoc+0xd50/0x2310
[  945.124319]  ? sctp_assoc_set_primary+0x274/0x310
[  945.129181]  ? sctp_transport_lookup_process+0x1d0/0x1d0
[  945.134649]  ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0
[  945.140374]  ? security_sctp_bind_connect+0x9a/0xc0
[  945.145423]  ? sctp_sendmsg_new_asoc+0xc06/0x11f0
[  945.150269]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  945.155481]  ? lock_downgrade+0x900/0x900
[  945.159645]  ? sctp_autobind+0x1f0/0x1f0
[  945.163710]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  945.168992]  ? rcu_bh_qs+0xc0/0xc0
[  945.172538]  ? check_preemption_disabled+0x48/0x200
[  945.177558]  ? lock_sock_nested+0x9a/0x120
[  945.181797]  ? lock_sock_nested+0x9a/0x120
[  945.186071]  sctp_sendmsg+0x13f6/0x1dd0
[  945.190060]  ? sctp_id2assoc+0x3e0/0x3e0
[  945.194144]  ? sock_has_perm+0x2bc/0x3e0
[  945.198220]  ? usercopy_warn+0x110/0x110
[  945.202293]  inet_sendmsg+0x1a1/0x690
[  945.206117]  ? ipip_gro_receive+0x100/0x100
[  945.210451]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  945.215994]  ? security_socket_sendmsg+0x94/0xc0
[  945.220755]  ? ipip_gro_receive+0x100/0x100
[  945.225084]  sock_sendmsg+0xd5/0x120
[  945.228809]  __sys_sendto+0x3d7/0x670
[  945.232623]  ? __ia32_sys_getpeername+0xb0/0xb0
[  945.237308]  ? wait_for_completion+0x8a0/0x8a0
[  945.241924]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  945.247482]  ? __sb_end_write+0xd9/0x110
[  945.251551]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  945.257102]  ? fput+0x130/0x1a0
[  945.260407]  ? do_syscall_64+0x9a/0x820
[  945.264394]  ? do_syscall_64+0x9a/0x820
[  945.268377]  ? lockdep_hardirqs_on+0x421/0x5c0
[  945.272977]  ? trace_hardirqs_on+0xbd/0x310
[  945.277301]  ? __ia32_sys_read+0xb0/0xb0
[  945.281362]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  945.286922]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  945.292302]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  945.297767]  __x64_sys_sendto+0xe1/0x1a0
[  945.301846]  do_syscall_64+0x1b9/0x820
[  945.305751]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  945.311123]  ? syscall_return_slowpath+0x5e0/0x5e0
[  945.316061]  ? trace_hardirqs_on_caller+0x310/0x310
[  945.321091]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  945.326124]  ? recalc_sigpending_tsk+0x180/0x180
[  945.330891]  ? kasan_check_write+0x14/0x20
[  945.335141]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  945.339999]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  945.345192] RIP: 0033:0x457679
[  945.348399] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  945.367310] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  945.375033] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  945.382312] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
03:42:51 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1000000}}, 0x18)

03:42:51 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x40087602, r1)

03:42:51 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]]}, 0x120)

03:42:51 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:51 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  945.389586] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  945.396859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  945.404132] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000008
03:42:51 executing program 4 (fault-call:6 fault-nth:9):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:51 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]]}, 0x120)

03:42:51 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:51 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]]}, 0x120)

03:42:51 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:51 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36000000]]}, 0x120)

[  945.655127] print_req_error: I/O error, dev loop0, sector 0
03:42:51 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:51 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x3000000}}, 0x18)

03:42:52 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c04, r1)

03:42:52 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]]}, 0x120)

[  946.095408] FAULT_INJECTION: forcing a failure.
[  946.095408] name failslab, interval 1, probability 0, space 0, times 0
[  946.107312] CPU: 1 PID: 13990 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  946.114621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  946.124003] Call Trace:
[  946.126607]  dump_stack+0x1c4/0x2b4
[  946.130227]  ? dump_stack_print_info.cold.2+0x52/0x52
[  946.135418]  ? unwind_get_return_address+0x61/0xa0
[  946.140356]  ? __save_stack_trace+0x8d/0xf0
[  946.144677]  should_fail.cold.4+0xa/0x17
[  946.148726]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  946.153811]  ? save_stack+0xa9/0xd0
[  946.157424]  ? save_stack+0x43/0xd0
[  946.161035]  ? kasan_kmalloc+0xc7/0xe0
[  946.164910]  ? __kmalloc_reserve.isra.39+0x41/0xe0
[  946.169823]  ? __alloc_skb+0x155/0x770
[  946.173695]  ? _sctp_make_chunk+0x58/0x280
[  946.177913]  ? sctp_make_init+0x96f/0x11a0
[  946.182141]  ? sctp_sf_do_prm_asoc+0xc1/0x360
[  946.186624]  ? sctp_do_sm+0x212/0x7450
[  946.190499]  ? sctp_primitive_ASSOCIATE+0x9d/0xd0
[  946.195344]  ? sctp_sendmsg+0x13f6/0x1dd0
[  946.199482]  ? inet_sendmsg+0x1a1/0x690
[  946.203442]  ? sock_sendmsg+0xd5/0x120
[  946.207318]  ? __sys_sendto+0x3d7/0x670
[  946.211275]  ? __x64_sys_sendto+0xe1/0x1a0
[  946.215498]  ? do_syscall_64+0x1b9/0x820
[  946.219549]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  946.224905]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  946.230455]  ? check_preemption_disabled+0x48/0x200
[  946.235461]  ? check_preemption_disabled+0x48/0x200
[  946.240473]  ? __lock_is_held+0xb5/0x140
[  946.244558]  ? __kmalloc_node_track_caller+0x33/0x70
[  946.249681]  ? rcu_read_lock_sched_held+0x108/0x120
[  946.254696]  ? kmem_cache_alloc_node_trace+0x34b/0x740
[  946.259966]  ? kasan_unpoison_shadow+0x35/0x50
[  946.264537]  __should_failslab+0x124/0x180
[  946.268777]  should_failslab+0x9/0x14
[  946.272564]  kmem_cache_alloc+0x47/0x730
[  946.276619]  sctp_chunkify+0xe3/0x480
[  946.280408]  ? sctp_chunk_iif+0xa0/0xa0
[  946.284374]  ? __kmalloc+0x25/0x760
[  946.287996]  ? mark_held_locks+0x130/0x130
[  946.292224]  ? sctp_bind_addrs_to_raw+0x118/0x370
[  946.297058]  ? sctp_bind_addrs_to_raw+0x239/0x370
[  946.301909]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  946.306928]  ? skb_put+0x17b/0x1e0
[  946.310469]  _sctp_make_chunk+0x156/0x280
[  946.314618]  sctp_make_init+0x96f/0x11a0
[  946.318676]  ? zap_class+0x640/0x640
[  946.322388]  ? sctp_init_cause+0x2d0/0x2d0
[  946.326612]  ? lock_downgrade+0x900/0x900
[  946.330753]  ? find_held_lock+0x36/0x1c0
[  946.334812]  ? is_bpf_text_address+0xac/0x170
[  946.339322]  ? lock_downgrade+0x900/0x900
[  946.343465]  ? check_preemption_disabled+0x48/0x200
[  946.348472]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  946.353648]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  946.359174]  ? sctp_sm_lookup_event+0xf8/0x4b4
[  946.363746]  ? rcu_bh_qs+0xc0/0xc0
[  946.367273]  ? dccp_diag_dump+0x40/0x40
[  946.371230]  ? rcu_bh_qs+0xc0/0xc0
[  946.374760]  sctp_sf_do_prm_asoc+0xc1/0x360
[  946.379072]  sctp_do_sm+0x212/0x7450
[  946.382773]  ? kernel_text_address+0x79/0xf0
[  946.387190]  ? __kernel_text_address+0xd/0x40
[  946.391690]  ? unwind_get_return_address+0x61/0xa0
[  946.396613]  ? sctp_cname+0x1a0/0x1a0
[  946.400406]  ? sctp_do_8_2_transport_strike.isra.15+0x980/0x980
[  946.406469]  ? save_stack+0xa9/0xd0
[  946.410079]  ? save_stack+0x43/0xd0
[  946.413694]  ? kasan_kmalloc+0xc7/0xe0
[  946.417569]  ? kmem_cache_alloc_trace+0x152/0x750
[  946.422399]  ? sctp_stream_init_ext+0x4f/0xf0
[  946.426879]  ? sctp_sendmsg_to_asoc+0x1a96/0x2310
[  946.431702]  ? sctp_sendmsg+0x13f6/0x1dd0
[  946.435837]  ? inet_sendmsg+0x1a1/0x690
[  946.439794]  ? sock_sendmsg+0xd5/0x120
[  946.443663]  ? __sys_sendto+0x3d7/0x670
[  946.447641]  ? __x64_sys_sendto+0xe1/0x1a0
[  946.451864]  ? do_syscall_64+0x1b9/0x820
[  946.455911]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  946.461268]  ? find_held_lock+0x36/0x1c0
[  946.465318]  ? find_held_lock+0x36/0x1c0
[  946.469365]  ? graph_lock+0x170/0x170
[  946.473160]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  946.478699]  ? check_preemption_disabled+0x48/0x200
[  946.483699]  ? check_preemption_disabled+0x48/0x200
[  946.488708]  ? __lock_is_held+0xb5/0x140
[  946.492756]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  946.498282]  ? flex_array_get+0x1da/0x260
[  946.502422]  ? sctp_sched_fcfs_init_sid+0x9/0x10
[  946.507165]  ? sctp_sched_init_sid+0x18d/0x2c0
[  946.511732]  ? sctp_stream_init_ext+0x4f/0xf0
[  946.516222]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  946.521405]  sctp_primitive_ASSOCIATE+0x9d/0xd0
[  946.526084]  sctp_sendmsg_to_asoc+0xd50/0x2310
[  946.530659]  ? sctp_assoc_set_primary+0x274/0x310
[  946.535501]  ? sctp_transport_lookup_process+0x1d0/0x1d0
[  946.540946]  ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0
[  946.546645]  ? security_sctp_bind_connect+0x9a/0xc0
[  946.551652]  ? sctp_sendmsg_new_asoc+0xc06/0x11f0
[  946.556484]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  946.561663]  ? lock_downgrade+0x900/0x900
[  946.565803]  ? sctp_autobind+0x1f0/0x1f0
[  946.569852]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  946.575130]  ? rcu_bh_qs+0xc0/0xc0
[  946.578669]  ? check_preemption_disabled+0x48/0x200
[  946.583673]  ? lock_sock_nested+0x9a/0x120
[  946.587894]  ? lock_sock_nested+0x9a/0x120
[  946.592124]  sctp_sendmsg+0x13f6/0x1dd0
[  946.596113]  ? sctp_id2assoc+0x3e0/0x3e0
[  946.600169]  ? sock_has_perm+0x2bc/0x3e0
[  946.604221]  ? usercopy_warn+0x110/0x110
[  946.608277]  inet_sendmsg+0x1a1/0x690
[  946.612064]  ? ipip_gro_receive+0x100/0x100
[  946.616375]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  946.621906]  ? security_socket_sendmsg+0x94/0xc0
[  946.626649]  ? ipip_gro_receive+0x100/0x100
[  946.630959]  sock_sendmsg+0xd5/0x120
[  946.634674]  __sys_sendto+0x3d7/0x670
[  946.638481]  ? __ia32_sys_getpeername+0xb0/0xb0
[  946.643141]  ? wait_for_completion+0x8a0/0x8a0
[  946.647723]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  946.653251]  ? __sb_end_write+0xd9/0x110
[  946.657318]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  946.662840]  ? fput+0x130/0x1a0
[  946.666106]  ? do_syscall_64+0x9a/0x820
[  946.670075]  ? do_syscall_64+0x9a/0x820
[  946.674040]  ? lockdep_hardirqs_on+0x421/0x5c0
[  946.678611]  ? trace_hardirqs_on+0xbd/0x310
[  946.682918]  ? __ia32_sys_read+0xb0/0xb0
[  946.686967]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  946.692490]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  946.697842]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  946.703284]  __x64_sys_sendto+0xe1/0x1a0
[  946.707341]  do_syscall_64+0x1b9/0x820
[  946.711216]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  946.716571]  ? syscall_return_slowpath+0x5e0/0x5e0
[  946.721490]  ? trace_hardirqs_on_caller+0x310/0x310
[  946.726494]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  946.731499]  ? recalc_sigpending_tsk+0x180/0x180
[  946.736257]  ? kasan_check_write+0x14/0x20
[  946.740497]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  946.745331]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  946.750508] RIP: 0033:0x457679
[  946.753686] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  946.772579] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  946.780277] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  946.787532] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
03:42:52 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:52 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  946.794785] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  946.802039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  946.809292] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 0000000000000009
03:42:53 executing program 4 (fault-call:6 fault-nth:10):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:53 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x8000000}}, 0x18)

03:42:53 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x125f, r1)

03:42:53 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600]]}, 0x120)

03:42:53 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:53 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]]}, 0x120)

[  947.024494] sg_write: 7 callbacks suppressed
[  947.024509] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  947.024509]    program syz-executor5 not setting count and/or reply_len properly
03:42:53 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  947.120370] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  947.120370]    program syz-executor5 not setting count and/or reply_len properly
03:42:53 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]]}, 0x120)

03:42:53 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  947.238242] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  947.238242]    program syz-executor5 not setting count and/or reply_len properly
03:42:53 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000]]}, 0x120)

[  947.392037] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  947.392037]    program syz-executor5 not setting count and/or reply_len properly
[  947.441604] FAULT_INJECTION: forcing a failure.
[  947.441604] name failslab, interval 1, probability 0, space 0, times 0
[  947.455206] CPU: 0 PID: 14050 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  947.462509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  947.471872] Call Trace:
[  947.474503]  dump_stack+0x1c4/0x2b4
[  947.478176]  ? dump_stack_print_info.cold.2+0x52/0x52
[  947.483413]  should_fail.cold.4+0xa/0x17
[  947.487512]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  947.492631]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  947.498186]  ? sctp_outq_tail+0x844/0xc30
[  947.502356]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  947.507932]  ? graph_lock+0x170/0x170
[  947.511753]  ? sctp_outq_free+0x20/0x20
[  947.515757]  ? refcount_add_not_zero_checked+0x330/0x330
[  947.521231]  ? graph_lock+0x170/0x170
[  947.525042]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  947.530578]  ? find_held_lock+0x36/0x1c0
[  947.534646]  ? __lock_is_held+0xb5/0x140
[  947.538739]  ? ___might_sleep+0x1ed/0x300
[  947.542886]  ? arch_local_save_flags+0x40/0x40
[  947.547477]  ? sctp_do_8_2_transport_strike.isra.15+0x980/0x980
[  947.553572]  __should_failslab+0x124/0x180
[  947.557815]  should_failslab+0x9/0x14
[  947.561608]  kmem_cache_alloc_trace+0x2d7/0x750
[  947.566281]  ? inet_sendmsg+0x1a1/0x690
[  947.570244]  ? sock_sendmsg+0xd5/0x120
[  947.574135]  ? __sys_sendto+0x3d7/0x670
[  947.578120]  ? __x64_sys_sendto+0xe1/0x1a0
[  947.582397]  ? do_syscall_64+0x1b9/0x820
[  947.586458]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  947.591834]  sctp_datamsg_from_user+0x132/0x1340
[  947.596604]  ? find_held_lock+0x36/0x1c0
[  947.600682]  ? graph_lock+0x170/0x170
[  947.604504]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  947.610043]  ? sctp_datamsg_free+0x90/0x90
[  947.614289]  ? __lock_is_held+0xb5/0x140
[  947.618344]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  947.623885]  ? flex_array_get+0x1da/0x260
[  947.628046]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  947.633230]  ? sctp_primitive_ASSOCIATE+0x9d/0xd0
[  947.638076]  sctp_sendmsg_to_asoc+0xe96/0x2310
[  947.642682]  ? sctp_assoc_set_primary+0x274/0x310
[  947.647558]  ? sctp_transport_lookup_process+0x1d0/0x1d0
[  947.653026]  ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0
[  947.658762]  ? security_sctp_bind_connect+0x9a/0xc0
[  947.663812]  ? sctp_sendmsg_new_asoc+0xc06/0x11f0
[  947.668666]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  947.673870]  ? lock_downgrade+0x900/0x900
[  947.678043]  ? sctp_autobind+0x1f0/0x1f0
[  947.682115]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  947.687411]  ? rcu_bh_qs+0xc0/0xc0
[  947.690967]  ? check_preemption_disabled+0x48/0x200
[  947.695994]  ? lock_sock_nested+0x9a/0x120
[  947.700251]  ? lock_sock_nested+0x9a/0x120
[  947.704516]  sctp_sendmsg+0x13f6/0x1dd0
[  947.708521]  ? sctp_id2assoc+0x3e0/0x3e0
[  947.712612]  ? sock_has_perm+0x2bc/0x3e0
[  947.716699]  ? usercopy_warn+0x110/0x110
[  947.720785]  inet_sendmsg+0x1a1/0x690
[  947.724603]  ? ipip_gro_receive+0x100/0x100
[  947.728946]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  947.734498]  ? security_socket_sendmsg+0x94/0xc0
[  947.739263]  ? ipip_gro_receive+0x100/0x100
[  947.743646]  sock_sendmsg+0xd5/0x120
[  947.747399]  __sys_sendto+0x3d7/0x670
[  947.751234]  ? __ia32_sys_getpeername+0xb0/0xb0
[  947.755923]  ? wait_for_completion+0x8a0/0x8a0
[  947.760556]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  947.766122]  ? __sb_end_write+0xd9/0x110
[  947.770205]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  947.775749]  ? fput+0x130/0x1a0
[  947.779048]  ? do_syscall_64+0x9a/0x820
[  947.783032]  ? do_syscall_64+0x9a/0x820
[  947.787021]  ? lockdep_hardirqs_on+0x421/0x5c0
[  947.791619]  ? trace_hardirqs_on+0xbd/0x310
[  947.795950]  ? __ia32_sys_read+0xb0/0xb0
[  947.800023]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  947.805571]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  947.810948]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  947.816425]  __x64_sys_sendto+0xe1/0x1a0
[  947.820513]  do_syscall_64+0x1b9/0x820
[  947.824418]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  947.829802]  ? syscall_return_slowpath+0x5e0/0x5e0
[  947.834747]  ? trace_hardirqs_on_caller+0x310/0x310
[  947.839778]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  947.844807]  ? recalc_sigpending_tsk+0x180/0x180
[  947.849575]  ? kasan_check_write+0x14/0x20
[  947.853832]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  947.858701]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  947.863899] RIP: 0033:0x457679
[  947.867104] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  947.886020] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  947.893747] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  947.901025] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  947.908304] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  947.915579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  947.922856] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 000000000000000a
03:42:54 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:54 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff]]}, 0x120)

[  947.940792] print_req_error: I/O error, dev loop0, sector 128
[  948.032219] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  948.032219]    program syz-executor5 not setting count and/or reply_len properly
03:42:54 executing program 4 (fault-call:6 fault-nth:11):
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:54 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x127b, r1)

03:42:54 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:54 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff]]}, 0x120)

03:42:54 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x3}}, 0x18)

03:42:54 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]]}, 0x120)

[  948.162909] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  948.162909]    program syz-executor5 not setting count and/or reply_len properly
03:42:54 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  948.299480] print_req_error: I/O error, dev loop0, sector 128
03:42:54 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  948.392454] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  948.392454]    program syz-executor5 not setting count and/or reply_len properly
03:42:54 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]]}, 0x120)

03:42:54 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  948.526404] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  948.526404]    program syz-executor5 not setting count and/or reply_len properly
[  948.896946] FAULT_INJECTION: forcing a failure.
[  948.896946] name failslab, interval 1, probability 0, space 0, times 0
[  948.912511] CPU: 1 PID: 14127 Comm: syz-executor4 Not tainted 4.19.0-rc4+ #28
[  948.919824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  948.929185] Call Trace:
[  948.929213]  dump_stack+0x1c4/0x2b4
[  948.929238]  ? dump_stack_print_info.cold.2+0x52/0x52
[  948.929280]  should_fail.cold.4+0xa/0x17
03:42:55 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

[  948.929306]  ? fault_create_debugfs_attr+0x1f0/0x1f0
[  948.929332]  ? __save_stack_trace+0x8d/0xf0
[  948.954194]  ? graph_lock+0x170/0x170
[  948.954220]  ? graph_lock+0x170/0x170
[  948.961818]  ? save_stack+0x43/0xd0
[  948.965455]  ? kasan_kmalloc+0xc7/0xe0
[  948.969363]  ? find_held_lock+0x36/0x1c0
[  948.973454]  ? __lock_is_held+0xb5/0x140
[  948.977549]  ? ___might_sleep+0x1ed/0x300
[  948.981708]  ? graph_lock+0x170/0x170
[  948.985528]  ? arch_local_save_flags+0x40/0x40
[  948.990119]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
03:42:55 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36]]}, 0x120)

[  948.995671]  __should_failslab+0x124/0x180
[  948.999943]  should_failslab+0x9/0x14
[  949.003781]  kmem_cache_alloc_node_trace+0x270/0x740
[  949.008915]  __kmalloc_node_track_caller+0x33/0x70
[  949.013872]  __kmalloc_reserve.isra.39+0x41/0xe0
[  949.018650]  __alloc_skb+0x155/0x770
[  949.022377]  ? lock_downgrade+0x900/0x900
[  949.026550]  ? check_preemption_disabled+0x48/0x200
[  949.031586]  ? skb_scrub_packet+0x490/0x490
[  949.035919]  ? kasan_check_read+0x11/0x20
[  949.040094]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  949.045396]  ? rcu_bh_qs+0xc0/0xc0
[  949.048959]  ? rcu_read_unlock_special.part.39+0x11f0/0x11f0
[  949.052139] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  949.052139]    program syz-executor5 not setting count and/or reply_len properly
[  949.054886]  ? ip_route_output_key_hash+0x297/0x3b0
[  949.054916]  ? ip_route_output_key_hash_rcu+0x3490/0x3490
[  949.081444]  sctp_packet_transmit+0x498/0x4160
[  949.086580]  ? rcu_read_unlock_special.part.39+0x11f0/0x11f0
[  949.092401]  ? kasan_check_read+0x11/0x20
[  949.096576]  ? sctp_v4_get_dst+0x63f/0x1830
[  949.100919]  ? sctp_v4_get_dst+0x63f/0x1830
[  949.105255]  ? sctp_packet_config+0xf90/0xf90
[  949.105277]  ? sctp_v4_copy_addrlist+0x740/0x740
[  949.105301]  ? sctp_v4_copy_addrlist+0x740/0x740
[  949.105330]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  949.105346]  ? sctp_assoc_set_pmtu+0x8a/0x140
[  949.105360]  ? sctp_transport_pmtu+0x189/0x4b0
[  949.105378]  ? sctp_assoc_sync_pmtu+0x1fa/0x280
[  949.128915]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  949.128934]  ? sctp_packet_config+0x8f1/0xf90
[  949.128974]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  949.138227]  ? sctp_assoc_set_pmtu+0x8a/0x140
[  949.138241]  ? sctp_transport_pmtu+0x189/0x4b0
[  949.138260]  ? sctp_assoc_sync_pmtu+0x1fa/0x280
[  949.138281]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  949.138301]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  949.138316]  ? __sctp_packet_append_chunk+0x11e/0xf00
[  949.138341]  ? sctp_csum_update+0x30/0x30
[  949.138363]  ? __sctp_outq_teardown+0x11f0/0x11f0
[  949.138399]  ? sctp_packet_append_chunk+0x985/0xe10
[  949.138416]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  949.138432]  ? check_preemption_disabled+0x48/0x200
[  949.138447]  ? sctp_sendmsg+0x13f6/0x1dd0
[  949.138473]  sctp_outq_flush_ctrl.constprop.12+0x7a9/0xe50
[  949.138503]  ? sctp_outq_select_transport+0x9a0/0x9a0
[  949.138531]  ? debug_smp_processor_id+0x1c/0x20
[  949.138549]  ? perf_trace_lock+0x14d/0x7a0
[  949.138574]  ? zap_class+0x640/0x640
[  949.138600]  ? find_held_lock+0x36/0x1c0
[  949.138626]  sctp_outq_flush+0x2c3/0x3360
[  949.138642]  ? debug_object_activate+0x402/0x600
[  949.138661]  ? lock_downgrade+0x900/0x900
[  949.138690]  ? sctp_check_transmitted+0x2020/0x2020
[  949.138717]  ? mark_held_locks+0xc7/0x130
[  949.138740]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  949.138757]  ? _raw_spin_unlock_irqrestore+0x82/0xd0
[  949.138774]  ? lockdep_hardirqs_on+0x421/0x5c0
[  949.138794]  ? trace_hardirqs_on+0xbd/0x310
[  949.138809]  ? kasan_check_read+0x11/0x20
[  949.138823]  ? add_timer+0x63f/0x1490
[  949.138840]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  949.138861]  ? calc_wheel_index+0x220/0x220
[  949.138889]  ? _raw_spin_unlock_irqrestore+0x6d/0xd0
[  949.138906]  ? add_timer+0x644/0x1490
[  949.138932]  ? mod_timer+0x1440/0x1440
[  949.311226]  ? sctp_init_cause+0x2d0/0x2d0
[  949.315467]  ? find_held_lock+0x36/0x1c0
[  949.319546]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  949.325073]  ? sctp_outq_tail+0x844/0xc30
[  949.329211]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  949.334737]  ? sctp_outq_free+0x20/0x20
[  949.338702]  ? refcount_add_not_zero_checked+0x330/0x330
[  949.344161]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  949.349360]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  949.354892]  ? sctp_endpoint_add_asoc+0xb3/0x3d0
[  949.359665]  ? sctp_endpoint_new+0xec0/0xec0
[  949.364068]  sctp_outq_uncork+0x6a/0x80
[  949.368047]  sctp_do_sm+0x897/0x7450
[  949.371764]  ? kernel_text_address+0x79/0xf0
[  949.376184]  ? sctp_do_8_2_transport_strike.isra.15+0x980/0x980
[  949.382233]  ? save_stack+0xa9/0xd0
[  949.385846]  ? save_stack+0x43/0xd0
[  949.389467]  ? kasan_kmalloc+0xc7/0xe0
[  949.393367]  ? kmem_cache_alloc_trace+0x152/0x750
[  949.398227]  ? sctp_stream_init_ext+0x4f/0xf0
[  949.402726]  ? sctp_sendmsg_to_asoc+0x1a96/0x2310
[  949.407556]  ? sctp_sendmsg+0x13f6/0x1dd0
[  949.411691]  ? inet_sendmsg+0x1a1/0x690
[  949.415655]  ? sock_sendmsg+0xd5/0x120
[  949.419528]  ? __sys_sendto+0x3d7/0x670
[  949.423497]  ? __x64_sys_sendto+0xe1/0x1a0
[  949.427736]  ? do_syscall_64+0x1b9/0x820
[  949.431787]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  949.437161]  ? find_held_lock+0x36/0x1c0
[  949.441210]  ? find_held_lock+0x36/0x1c0
[  949.445266]  ? graph_lock+0x170/0x170
[  949.449061]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  949.454595]  ? check_preemption_disabled+0x48/0x200
[  949.459620]  ? check_preemption_disabled+0x48/0x200
[  949.464663]  ? __lock_is_held+0xb5/0x140
[  949.468725]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  949.474263]  ? flex_array_get+0x1da/0x260
[  949.478416]  ? __sanitizer_cov_trace_switch+0x53/0x90
[  949.483616]  sctp_primitive_ASSOCIATE+0x9d/0xd0
[  949.488292]  sctp_sendmsg_to_asoc+0xd50/0x2310
[  949.492883]  ? sctp_assoc_set_primary+0x274/0x310
[  949.497737]  ? sctp_transport_lookup_process+0x1d0/0x1d0
[  949.503177]  ? sctp_assoc_set_bind_addr_from_ep+0x165/0x1c0
[  949.508887]  ? security_sctp_bind_connect+0x9a/0xc0
[  949.513931]  ? sctp_sendmsg_new_asoc+0xc06/0x11f0
[  949.518782]  ? sctp_endpoint_lookup_assoc+0x153/0x290
[  949.523969]  ? lock_downgrade+0x900/0x900
[  949.528109]  ? sctp_autobind+0x1f0/0x1f0
[  949.532161]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  949.537429]  ? rcu_bh_qs+0xc0/0xc0
[  949.540978]  ? check_preemption_disabled+0x48/0x200
[  949.545996]  ? lock_sock_nested+0x9a/0x120
[  949.550218]  ? lock_sock_nested+0x9a/0x120
[  949.554490]  sctp_sendmsg+0x13f6/0x1dd0
[  949.558480]  ? sctp_id2assoc+0x3e0/0x3e0
[  949.562547]  ? sock_has_perm+0x2bc/0x3e0
[  949.566605]  ? usercopy_warn+0x110/0x110
[  949.570667]  inet_sendmsg+0x1a1/0x690
[  949.574462]  ? ipip_gro_receive+0x100/0x100
[  949.578793]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  949.584330]  ? security_socket_sendmsg+0x94/0xc0
[  949.589075]  ? ipip_gro_receive+0x100/0x100
[  949.593395]  sock_sendmsg+0xd5/0x120
[  949.597100]  __sys_sendto+0x3d7/0x670
[  949.600906]  ? __ia32_sys_getpeername+0xb0/0xb0
[  949.605591]  ? wait_for_completion+0x8a0/0x8a0
[  949.610187]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  949.615734]  ? __sb_end_write+0xd9/0x110
[  949.619801]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  949.625340]  ? fput+0x130/0x1a0
[  949.628621]  ? do_syscall_64+0x9a/0x820
[  949.632592]  ? do_syscall_64+0x9a/0x820
[  949.636584]  ? lockdep_hardirqs_on+0x421/0x5c0
[  949.641168]  ? trace_hardirqs_on+0xbd/0x310
[  949.645495]  ? __ia32_sys_read+0xb0/0xb0
[  949.649542]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  949.655068]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  949.660421]  ? __bpf_trace_preemptirq_template+0x30/0x30
[  949.665865]  __x64_sys_sendto+0xe1/0x1a0
[  949.669933]  do_syscall_64+0x1b9/0x820
[  949.673862]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  949.679230]  ? syscall_return_slowpath+0x5e0/0x5e0
[  949.684155]  ? trace_hardirqs_on_caller+0x310/0x310
[  949.689164]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  949.694190]  ? recalc_sigpending_tsk+0x180/0x180
[  949.698941]  ? kasan_check_write+0x14/0x20
[  949.703184]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  949.708029]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  949.713218] RIP: 0033:0x457679
[  949.716416] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  949.735308] RSP: 002b:00007f5764f71c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  949.743003] RAX: ffffffffffffffda RBX: 00007f5764f726d4 RCX: 0000000000457679
[  949.750259] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003
[  949.757517] RBP: 000000000072bfa0 R08: 0000000020a04000 R09: 0000000000000010
[  949.764780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  949.772071] R13: 00000000004d55f8 R14: 00000000004c3957 R15: 000000000000000b
03:42:55 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1265, r1)

03:42:55 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:55 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:55 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:55 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]]}, 0x120)

03:42:55 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x8}}, 0x18)

03:42:56 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]]}, 0x120)

[  949.919294] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  949.919294]    program syz-executor5 not setting count and/or reply_len properly
03:42:56 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:56 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]]}, 0x120)

03:42:56 executing program 2:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:56 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]]}, 0x120)

03:42:56 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1260, r1)

[  950.305589] print_req_error: I/O error, dev loop0, sector 256
03:42:57 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0xb, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:57 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6000000]]}, 0x120)

03:42:57 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:57 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x100000000000000}}, 0x18)

03:42:57 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x5460, r1)

03:42:57 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:57 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]]}, 0x120)

03:42:57 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6]]}, 0x120)

03:42:57 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]]}, 0x120)

03:42:57 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  951.187183] print_req_error: I/O error, dev loop0, sector 0
03:42:57 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1276, r1)

03:42:57 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]]}, 0x120)

[  951.378490] print_req_error: I/O error, dev loop0, sector 128
03:42:58 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x2c, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:58 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]]}, 0x120)

03:42:58 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x80086601, r1)

03:42:58 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0xa0008000}}, 0x18)

03:42:58 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

[  952.291331] sg_write: 8 callbacks suppressed
[  952.291349] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  952.291349]    program syz-executor5 not setting count and/or reply_len properly
03:42:58 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x127f, r1)

03:42:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]]}, 0x120)

03:42:58 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  952.439847] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  952.439847]    program syz-executor5 not setting count and/or reply_len properly
03:42:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]]}, 0x120)

[  952.570491] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  952.570491]    program syz-executor5 not setting count and/or reply_len properly
03:42:58 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:58 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]]}, 0x120)

[  952.710317] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  952.710317]    program syz-executor5 not setting count and/or reply_len properly
03:42:59 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]]}, 0x120)

03:42:59 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x5421, r1)

03:42:59 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x4, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:42:59 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x300}}, 0x18)

03:42:59 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:42:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]]}, 0x120)

[  953.562511] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  953.562511]    program syz-executor5 not setting count and/or reply_len properly
03:42:59 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  953.666458] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  953.666458]    program syz-executor5 not setting count and/or reply_len properly
03:42:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]]}, 0x120)

03:42:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]]}, 0x120)

[  953.789929] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  953.789929]    program syz-executor5 not setting count and/or reply_len properly
03:42:59 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:42:59 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]]}, 0x120)

[  953.894476] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  953.894476]    program syz-executor5 not setting count and/or reply_len properly
03:43:00 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x5452, r1)

[  953.985123] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  953.985123]    program syz-executor5 not setting count and/or reply_len properly
03:43:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000]]}, 0x120)

03:43:00 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  954.077527] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  954.077527]    program syz-executor5 not setting count and/or reply_len properly
03:43:00 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x3, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:00 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x20000198)

03:43:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]]}, 0x120)

03:43:00 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1261, r1)

03:43:00 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:00 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:43:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]]}, 0x120)

03:43:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]]}, 0x120)

[  954.758054] print_req_error: I/O error, dev loop0, sector 512
03:43:00 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:00 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1268, r1)

03:43:00 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]]}, 0x120)

03:43:01 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x7)

[  955.031396] print_req_error: I/O error, dev loop0, sector 384
03:43:01 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]]}, 0x120)

03:43:01 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c03, r1)

03:43:01 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x2e, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:01 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
ioctl$RTC_WIE_OFF(r0, 0x7010)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100000000, 0x20000)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x1d42)

03:43:01 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:43:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36000000]]}, 0x120)

03:43:01 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6000000]]}, 0x120)

[  955.948292] print_req_error: I/O error, dev loop0, sector 512
03:43:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]]}, 0x120)

03:43:02 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]]}, 0x120)

03:43:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]]}, 0x120)

[  956.181512] print_req_error: I/O error, dev loop0, sector 128
03:43:02 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:02 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]]}, 0x120)

03:43:02 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x125d, r1)

[  956.450789] print_req_error: I/O error, dev loop0, sector 768
03:43:03 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:03 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x32, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]]}, 0x120)

03:43:03 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c05, r1)

03:43:03 executing program 0:
perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e6, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x80000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x600, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x800, 0x0)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0x4, 0x6, 0x1, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x100000001})
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:03 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:43:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff]]}, 0x120)

[  957.132393] Unknown ioctl 21511
[  957.142168] Unknown ioctl 21511
03:43:03 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]]}, 0x120)

[  957.364493] sg_write: 13 callbacks suppressed
[  957.364510] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  957.364510]    program syz-executor5 not setting count and/or reply_len properly
[  957.398306] print_req_error: I/O error, dev loop0, sector 256
03:43:03 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x0, [], [{0x100000001, 0x1f, 0x0, 0x7, 0x40, 0xcb8}, {0x7, 0x36c, 0x8, 0x9, 0x3, 0x6}], [[], [], [], []]})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:03 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbf]]}, 0x120)

[  957.499323] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  957.499323]    program syz-executor5 not setting count and/or reply_len properly
03:43:03 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6]]}, 0x120)

[  957.619472] print_req_error: I/O error, dev loop0, sector 512
[  957.650195] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  957.650195]    program syz-executor5 not setting count and/or reply_len properly
03:43:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]]}, 0x120)

03:43:04 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:04 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x125e, r1)

03:43:04 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x33, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:04 executing program 0:
r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x109100)
write$FUSE_IOCTL(r0, &(0x7f0000000140)={0x20, 0x0, 0x5, {0x1, 0x0, 0xff}}, 0x20)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r2, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:04 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:43:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]]}, 0x120)

[  958.700554] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  958.700554]    program syz-executor5 not setting count and/or reply_len properly
[  958.800176] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  958.800176]    program syz-executor5 not setting count and/or reply_len properly
03:43:04 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]]}, 0x120)

[  958.857688] print_req_error: I/O error, dev loop0, sector 128
03:43:04 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  958.926512] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  958.926512]    program syz-executor5 not setting count and/or reply_len properly
03:43:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]]}, 0x120)

03:43:05 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600]]}, 0x120)

[  959.063969] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  959.063969]    program syz-executor5 not setting count and/or reply_len properly
03:43:05 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600000000000000]]}, 0x120)

[  959.147181] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  959.147181]    program syz-executor5 not setting count and/or reply_len properly
03:43:05 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340), 0x0, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  959.238332] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  959.238332]    program syz-executor5 not setting count and/or reply_len properly
[  959.269122] print_req_error: I/O error, dev loop0, sector 0
03:43:05 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0xc0045878, r1)

03:43:06 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x10, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:06 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:06 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x284141, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]]}, 0x120)

03:43:06 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c07, r1)

03:43:06 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000200))
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

[  960.019973] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  960.019973]    program syz-executor5 not setting count and/or reply_len properly
03:43:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]]}, 0x120)

03:43:06 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:06 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]]}, 0x120)

03:43:06 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:06 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x401070ca, r1)

03:43:06 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0x0, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:07 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x26, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]]}, 0x120)

03:43:07 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:07 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x109000, 0x0)
write$selinux_load(r0, &(0x7f0000000380)={0xf97cff8c, 0x8, 'SE Linux', "b457212cbe82bcb41b33c8bad6cd769809c939c21b8e769dc9ce45e901a257c0fec1b4bbe88d630b712ff6149ed22635e3a6c6417ab894c16184667d209a7f22c1b20a3dd5974a4a1964556230aa88f6a1ee4f2b1f0f96a060dfcde156da75c15072e20319586c8719c79d0dc7dab98d68caa6a0ae7dd30d38e647d5a30e7770e0dfee48bad301e488c458de0dfbc6a9324c629fbc0ca29e909ce9f541e7ce17ec90bd6a09c784e850641231684616477e96aaaa9054208d2a62a57e39c7ebd2ee20de63ac09328341209109d1ab415266422f7e7a01440187cfb8bcf57b7d4508d18d8d97402a4607"}, 0xf9)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:07 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000200))
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:07 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x401070cd, r1)

03:43:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]]}, 0x120)

03:43:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff00000000]]}, 0x120)

[  961.157342] print_req_error: I/O error, dev loop0, sector 512
03:43:07 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:07 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x80081270, r1)

03:43:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]]}, 0x120)

03:43:07 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]]}, 0x120)

[  961.420134] print_req_error: I/O error, dev loop0, sector 768
03:43:08 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:08 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600]]}, 0x120)

03:43:08 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x30, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:08 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setparam(0x0, &(0x7f0000000480))
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="2f3386cf3b88b6001b0a746f90ecb300"], 0x2)
mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a04, &(0x7f0000000400)=ANY=[])
rmdir(&(0x7f0000000240)='./file0//ile0\x00')
mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000280)={0x7, 0x101})
openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x10000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18)

03:43:08 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1267, r1)

03:43:08 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

[  962.440831] sg_write: 7 callbacks suppressed
[  962.440848] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  962.440848]    program syz-executor5 not setting count and/or reply_len properly
03:43:08 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36]]}, 0x120)

03:43:08 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x401070c9, r1)

[  962.592968] print_req_error: I/O error, dev loop0, sector 384
03:43:08 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:08 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]]}, 0x120)

[  962.642200] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  962.642200]    program syz-executor5 not setting count and/or reply_len properly
03:43:08 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  962.737003] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  962.737003]    program syz-executor5 not setting count and/or reply_len properly
03:43:08 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600000000000000]]}, 0x120)

03:43:08 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  962.885220] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  962.885220]    program syz-executor5 not setting count and/or reply_len properly
03:43:08 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]]}, 0x120)

03:43:09 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18)

[  962.980312] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  962.980312]    program syz-executor5 not setting count and/or reply_len properly
03:43:09 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff]]}, 0x120)

03:43:09 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:09 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1264, r1)

03:43:09 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x2a, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:09 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:09 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:09 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]]}, 0x120)

[  963.488124] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  963.488124]    program syz-executor5 not setting count and/or reply_len properly
03:43:09 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  963.596404] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  963.596404]    program syz-executor5 not setting count and/or reply_len properly
03:43:09 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:09 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]]}, 0x120)

03:43:09 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  963.760986] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  963.760986]    program syz-executor5 not setting count and/or reply_len properly
03:43:09 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]]}, 0x120)

[  963.876032] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  963.876032]    program syz-executor5 not setting count and/or reply_len properly
03:43:10 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]]}, 0x120)

[  963.967132] print_req_error: I/O error, dev loop0, sector 640
03:43:10 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  964.050275] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  964.050275]    program syz-executor5 not setting count and/or reply_len properly
[  964.186789] print_req_error: I/O error, dev loop0, sector 256
03:43:10 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x80081272, r1)

03:43:11 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x31, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]]}, 0x120)

03:43:11 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:11 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:11 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c09, r1)

03:43:11 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r2 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000200))
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r1, r1, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
gettid()
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000002980))
read(r3, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
close(r4)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r5 = epoll_create1(0x0)
flock(r5, 0x1)

03:43:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]]}, 0x120)

03:43:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]]}, 0x120)

03:43:11 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  965.227004] print_req_error: I/O error, dev loop0, sector 512
03:43:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]]}, 0x120)

03:43:11 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600]]}, 0x120)

03:43:11 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x40101283, r1)

03:43:12 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x35, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]]}, 0x120)

03:43:12 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r0}}, 0x18)

03:43:12 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:12 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x40081271, r1)

03:43:12 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]]}, 0x120)

03:43:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]]}, 0x120)

[  966.436009] print_req_error: I/O error, dev loop0, sector 1024
03:43:12 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]]}, 0x120)

03:43:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]]}, 0x120)

03:43:12 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600000000000000]]}, 0x120)

[  966.667341] print_req_error: I/O error, dev loop0, sector 384
[  966.877086] print_req_error: I/O error, dev loop0, sector 128
03:43:13 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x27, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:13 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00', 0x0, 0x6, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff]]}, 0x120)

03:43:13 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0)
ioctl$KDSETLED(r2, 0x4b32, 0x8)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:13 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1262, r1)

03:43:13 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]]}, 0x120)

[  967.758303] sg_write: 11 callbacks suppressed
[  967.758320] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  967.758320]    program syz-executor5 not setting count and/or reply_len properly
[  967.834776] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  967.834776]    program syz-executor5 not setting count and/or reply_len properly
03:43:13 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]]}, 0x120)

03:43:13 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00', 0x0, 0x0, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  967.897459] print_req_error: I/O error, dev loop0, sector 384
[  967.979784] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  967.979784]    program syz-executor5 not setting count and/or reply_len properly
03:43:14 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6000000]]}, 0x120)

03:43:14 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:14 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c02, r1)

[  968.158804] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  968.158804]    program syz-executor5 not setting count and/or reply_len properly
03:43:14 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff00000000]]}, 0x120)

03:43:14 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00', 0x0, 0x0, 0x4b}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:14 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1b, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:14 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10801, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:14 executing program 1:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:14 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4020940d, r1)

03:43:15 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36000000]]}, 0x120)

[  968.915224] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  968.915224]    program syz-executor5 not setting count and/or reply_len properly
[  969.021267] print_req_error: I/O error, dev loop0, sector 256
[  969.022054] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  969.022054]    program syz-executor5 not setting count and/or reply_len properly
03:43:15 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x127c, r1)

03:43:15 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:15 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]]}, 0x120)

03:43:15 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6]]}, 0x120)

[  969.200928] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  969.200928]    program syz-executor5 not setting count and/or reply_len properly
03:43:15 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  969.253539] print_req_error: I/O error, dev loop0, sector 896
[  969.282087] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  969.282087]    program syz-executor5 not setting count and/or reply_len properly
03:43:15 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]]}, 0x120)

03:43:15 executing program 0:
openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x10002, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:15 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x0, 0x0, 0x0, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  969.427531] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  969.427531]    program syz-executor5 not setting count and/or reply_len properly
03:43:16 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x6, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]]}, 0x120)

03:43:16 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x0, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:16 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x127d, r1)

03:43:16 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=<r1=>0x0)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000280)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=<r3=>0x0)
rt_tgsigqueueinfo(r1, r3, 0xa, &(0x7f00000000c0)={0x1c, 0x7, 0x81, 0x7})
readlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x6, 0xcb, "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", 0xa2, 0x80000001, 0x0, 0xb01, 0x6, 0x80000001, 0x3}, r4}}, 0x120)
r5 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x5, 0x1)
ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x5)

03:43:16 executing program 1:
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]]}, 0x120)

[  970.395570] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  970.395570]    program syz-executor5 not setting count and/or reply_len properly
03:43:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]]}, 0x120)

03:43:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf600]]}, 0x120)

03:43:16 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x0, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:16 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]]}, 0x120)

03:43:16 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  970.708733] print_req_error: I/O error, dev loop0, sector 0
03:43:17 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0xffffff80, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]]}, 0x120)

03:43:17 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:17 executing program 0:
rt_sigprocmask(0x2, &(0x7f0000000000)={0x9}, &(0x7f0000000080), 0x8)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:17 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4b47, r1)

03:43:17 executing program 1:
socket$inet6(0xa, 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]]}, 0x120)

03:43:17 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]]}, 0x120)

03:43:18 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]]}, 0x120)

03:43:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]]}, 0x120)

[  972.167402] print_req_error: I/O error, dev loop0, sector 384
03:43:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]]}, 0x120)

03:43:18 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x28, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:18 executing program 0:
r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x8, "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", 0x36, 0x133e000, 0x8, 0x86db, 0xdc, 0xffffffffffffffe0, 0xfffffffffffffffb}, r1}}, 0x128)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00')
ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x10001, 0x3})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0xffffffffffffff90)

03:43:18 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:18 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x401870cc, r1)

03:43:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36]]}, 0x120)

03:43:18 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:18 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]]}, 0x120)

03:43:18 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  972.927897] sg_write: 11 callbacks suppressed
[  972.927912] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  972.927912]    program syz-executor5 not setting count and/or reply_len properly
03:43:19 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
socket$packet(0x11, 0x2, 0x300)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0xfffffe72, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:19 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x2, r1)

03:43:19 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]]}, 0x120)

[  973.061972] print_req_error: I/O error, dev loop0, sector 256
[  973.080282] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  973.080282]    program syz-executor5 not setting count and/or reply_len properly
03:43:19 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:19 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfffffff]]}, 0x120)

03:43:19 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:19 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1277, r1)

03:43:19 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x39, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:19 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:19 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x200000)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:20 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]]}, 0x120)

[  973.916254] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  973.916254]    program syz-executor5 not setting count and/or reply_len properly
03:43:20 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]]}, 0x120)

[  974.003281] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  974.003281]    program syz-executor5 not setting count and/or reply_len properly
03:43:20 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x81, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  974.111995] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  974.111995]    program syz-executor5 not setting count and/or reply_len properly
03:43:20 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb]]}, 0x120)

03:43:20 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x0, 0x0, 0x101})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  974.292333] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  974.292333]    program syz-executor5 not setting count and/or reply_len properly
03:43:20 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]]}, 0x120)

[  974.397125] print_req_error: I/O error, dev loop0, sector 640
[  974.435697] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
03:43:20 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  974.435697]    program syz-executor5 not setting count and/or reply_len properly
03:43:20 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]]}, 0x120)

[  974.577105] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  974.577105]    program syz-executor5 not setting count and/or reply_len properly
[  974.606452] print_req_error: I/O error, dev loop0, sector 640
03:43:21 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:21 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x127a, r1)

03:43:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbffffff00000000]]}, 0x120)

03:43:21 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x300, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:21 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x202000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:21 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:21 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1274, r1)

[  975.508037] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  975.508037]    program syz-executor5 not setting count and/or reply_len properly
03:43:21 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]]}, 0x120)

03:43:21 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  975.672599] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  975.672599]    program syz-executor5 not setting count and/or reply_len properly
03:43:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3600000000000000]]}, 0x120)

03:43:21 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1263, r1)

03:43:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]]}, 0x120)

03:43:21 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:21 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]]}, 0x120)

03:43:22 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0xe, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:22 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x0)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:22 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]]}, 0x120)

03:43:22 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r2 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@ethernet={0x0, @broadcast}, &(0x7f0000000000)=0x80, 0x800)
setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000140)=0x8001, 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={<r3=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xffffffffffffffff, @loopback, 0x200}, {0xa, 0x4e20, 0x58d, @mcast2, 0xfffffffffffffffc}, r3, 0x8}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @loopback, 0xa2}, {0xa, 0x4e24, 0x82, @dev={0xfe, 0x80, [], 0x1e}, 0x1ff}, r3, 0x1ff}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x200000, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18)
sendfile(r0, r1, &(0x7f0000000280), 0x8)

03:43:22 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:22 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1269, r1)

03:43:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbf]]}, 0x120)

03:43:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x200008e0)

03:43:22 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x23)

03:43:22 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:22 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x40049409, r1)

[  976.876227] print_req_error: I/O error, dev loop0, sector 512
03:43:23 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x14, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000))
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)
r3 = fcntl$getown(r1, 0x9)
r4 = fcntl$getown(r0, 0x9)
setpgid(r3, r4)
socket$inet_udp(0x2, 0x2, 0x0)

03:43:23 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x123)

03:43:23 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x301, r1)

03:43:23 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:23 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3f, @mcast2, 0x3f}, {0xa, 0x4e20, 0x6, @empty, 0x8}, r1, 0x6}}, 0x48)

03:43:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x106)

03:43:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x103)

03:43:23 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x105)

03:43:23 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x29)

[  977.707087] print_req_error: I/O error, dev loop0, sector 0
03:43:24 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x3d, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:24 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:24 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:24 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e21, @remote}})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18)

03:43:24 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x107)

03:43:24 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c08, r1)

03:43:24 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  978.377705] sg_write: 10 callbacks suppressed
[  978.377720] sg_write: data in/out 9/221 bytes for SCSI command 0x0-- guessing data in;
[  978.377720]    program syz-executor5 not setting count and/or reply_len properly
03:43:24 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x109)

03:43:24 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  978.485789] sg_write: data in/out 9/223 bytes for SCSI command 0x0-- guessing data in;
[  978.485789]    program syz-executor5 not setting count and/or reply_len properly
03:43:24 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
syz_open_procfs(r1, &(0x7f0000000080)='attr/prev\x00')
socketpair$unix(0x1, 0x1ffedffffa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

[  978.632248] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  978.632248]    program syz-executor5 not setting count and/or reply_len properly
[  978.667775] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
03:43:24 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10c00, 0x0)
accept4$alg(r2, 0x0, 0x0, 0x800)

[  978.667775]    program syz-executor5 not setting count and/or reply_len properly
[  978.687019] print_req_error: I/O error, dev loop0, sector 512
03:43:24 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  978.779597] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  978.779597]    program syz-executor5 not setting count and/or reply_len properly
03:43:25 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4b49, r1)

03:43:25 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002840)='/dev/dsp\x00', 0x10000, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000002880)=0x1, &(0x7f00000028c0)=0x4)
r1 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x40000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff)
write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003cb1c7ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000006e99108b8eb4baecf938090690d5067abf95faa9a53466313752bda075ee065052b7fccdb64b943eb3f8d484bd7bf9c6d5b0c454b05316d3c8535e00000000"], 0x120)
r3 = geteuid()
syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x1, 0xa, &(0x7f0000000640)=[{&(0x7f00000007c0)="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", 0x1000, 0x7ff}, {&(0x7f0000000240)="d6c86781b6869ed4e9772baa367ee52bbee188aba42ad8d69e9ae206b3428aa875748639dc72a02fb186c65473a2250a7cabd45d9a07488d84e4e93982361e08d1b182f02429856088d097e35a7a17b626422520", 0x54, 0xb75c}, {&(0x7f00000002c0)="46f315c097215d724246615a991a1776bed2325f73ecf65e1c5c45c271c03deccb31aceaaa9359a1a39be7144979a76a14b0207d3b79402c7b22c87271af5bd077dc84e131b177d82c91569c62a787a8a9cd59f6f7f9576bc930467a9e33ce041c74c09b9fb9f33b59261fd704ef245b471f8f639306f9923190e49eb2f6a3", 0x7f, 0x4}, {&(0x7f0000000340)="fbf39f3367f4f9f0f1d33d7448c5eb384d942a6700f39ac84f94be583fe8fbf20659288e42cced281269986a32c3c3b4d5566106053bf63003ff657bd5d0694020e17930d5cc4a068e22d02f2ac89a612f66bb42a435d171c6606f734373e0526d", 0x61, 0xffffffff80000001}, {&(0x7f00000003c0)="acfc97f0fd563e55e4af3ea810dd47d31d35fadcadea873480ef13e4bbfb7db2e4815f182b2c5213ef3819be2d94be91810ed642ea645fa49587c6c9564e16fba27341d51489c3868dc3d93321c9a118aab75ca9168e292d3d024e7c8454e2d1447f0d0861af207070", 0x69, 0x2}, {&(0x7f0000000440)="e850f074e20025fe5df731efeb87b8f1d01f10c422cb17ab61b137d10525fd958a29a1ecd57d", 0x26, 0xfffffffffffffffe}, {&(0x7f00000017c0)="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", 0x1000, 0x4}, {&(0x7f0000000480)="f0790e7aaf1439a45a4affd2bbcc07c160ef803c6835058547899ae8f2f74d428ae045d8ca4e949a3bdf1e35af8695fe7c851b36b3fd89f629582ef103624f04b5db667cf1212020c3fddbd685bfd5375b0f39160094055eec47ffdf81ee5303fe5e71c1efbf2e1f31ef324b10ccdaaef5c91044bd8c8684", 0x78, 0xfffffffffffffffe}, {&(0x7f0000000500)="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", 0xfb, 0x9}, {&(0x7f0000000600)="76c2e1f5daae0f48f9142bd3f456c0608d2cfdf84cd8fa9623896d4d10dcd46052d997115a825f8bb4396315cf75", 0x2e, 0x40}], 0x1000, &(0x7f0000002900)=ANY=[@ANYBLOB="6e6f646f74732c73792c7569643dbc7c5a4181d8482f6ebeebf4b44cbac6ce6a9ed72e0e5afb19edf8abbf2310ebf60adbab2a678242acff9e9e5efdc46d930000", @ANYRESHEX=r3, @ANYBLOB=',dots,sys_immutable,dots,debug,dots,nodots,\x00'])

[  979.111296] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  979.111296]    program syz-executor5 not setting count and/or reply_len properly
[  979.213294] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  979.213294]    program syz-executor5 not setting count and/or reply_len properly
03:43:25 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:25 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0xf, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:25 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[{0x2, 0x3}, {0x7}, {0xa, 0x149300000}, {0x4}, {}], 0x5)
exit(0x3ce)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:25 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:25 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x5450, r1)

03:43:25 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x52, 0x400)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
accept4$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000)
r1 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x77359400}})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004841f8da0000000000000000000000000000000000000000000000000000000042cc363b706ffe01850415289235089c93c812bd"], 0x120)

03:43:25 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
write$selinux_load(r2, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "243fa44422a45b0fb681cce59a9fb76e3aee5eca9b1f704007bede83d33538498b648157c41900da41741e0f62e7d7eaca134e6b3f8aff"}, 0x47)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)

[  979.764197] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  979.764197]    program syz-executor5 not setting count and/or reply_len properly
03:43:25 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  979.880233] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  979.880233]    program syz-executor5 not setting count and/or reply_len properly
03:43:25 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0xfffd, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = open(&(0x7f0000000280)='\x00', 0x80001, 0x80)
ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000002c0))
syz_open_pts(r2, 0x18cbf)
shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4)
getresgid(&(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200), &(0x7f0000000240))
lchown(&(0x7f0000000040)='./file0\x00', r3, r4)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000525aadc0852b93b1d80a52dd14b3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd2ce24f6ef103b2d4d75f2147c4dcd5936dbf678be5473cde07916a3fe48de4f402fbeba1d9e7cede76f3645797d066bf48e1cc2798d974fffa52fc"], 0x120)

03:43:26 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x2, 0x1f, 0x0, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  980.013903] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  980.013903]    program syz-executor5 not setting count and/or reply_len properly
03:43:26 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x100)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='cgroup\x00')
r1 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40000, 0x0)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x40000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9)
write$binfmt_aout(r1, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x120)
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x80000)
ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000080)=""/127)

03:43:26 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x2, 0x1f, 0x0, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

[  980.550943] print_req_error: I/O error, dev loop0, sector 640
03:43:26 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0x4, 0x0, 0x2, 0x5, 0x7, 0x4}}, 0x8)
r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x121700)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052dd000000000000000000000000000000000000"], 0x120)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x20001, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={<r4=>0x0, @in={{0x2, 0x4e20, @local}}, [0x6, 0x1, 0x8, 0x5c, 0xff, 0x1ff, 0x3ff, 0x3, 0xd836, 0x3f, 0x4, 0x100000000, 0x4, 0x23, 0x404c]}, &(0x7f0000000040)=0x100)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={r4, 0x6}, &(0x7f0000000280)=0x8)

03:43:27 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
r2 = memfd_create(&(0x7f0000000000)='md5sum]/wlan0-+wlan0&mime_typesecurity-\x00', 0x2)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000280)={<r3=>0x0, 0xb5, "f8a8e4fd3962f21f8ed71b142b5c4d086926ae882486287617b9e212c9dc0168471c6c61ff1eaad13b85ba7966fa917af68bda95641d1e09ff0f8474e5886ab88bdb83fe566efc55b7f0c36e6b4dd05a189497e1c09611be92d145194bb264bff0ff436d7c0a68d240f21ace4a202be904fda1421da55a186ab5df0897798308b6cbdd1b61fc398cae03b21d4f262451df148b43bbb137ba4a9775da2fa516e19abf0647c1bfcbe66c8bc3ff496f2ff040ddf373fc"}, &(0x7f0000000080)=0xbd)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0x8)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:27 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x2, 0x1f, 0x0, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:27 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0xc0045878, r1)

03:43:27 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x19, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x0)
r1 = syz_open_pts(0xffffffffffffffff, 0x8000)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000900)="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")
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:27 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2000, 0x0)
r2 = eventfd(0x0)
unshare(0x2000400)
fchown(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f0000000040)={{0x0, 0x0, 0xfffffffffffffffd, 0x2d, 0x0, 0x3}, "", [[]]}, 0x120)

03:43:27 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x401870c8, r1)

03:43:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x100}, "", [[]]}, 0x120)

03:43:27 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x1, 0x1f, 0x2, &(0x7f0000000180)=[{}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x203)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:27 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

03:43:27 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x0, 0x1f, 0x2, &(0x7f0000000180)})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:27 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
r1 = dup(0xffffffffffffff9c)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x80000001, 0x6, 0x3, 0x6, 0x9}, 0x14)
write$binfmt_elf64(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x6, 0x841a, 0x2, 0x7fff, 0x3, 0x6, 0x6, 0x3d5, 0x40, 0x6, 0x5, 0x4, 0x38, 0x1, 0x165, 0xffffffffffffff37, 0xffffffffb313a903}, [{0x70000007, 0x5, 0x80, 0x200, 0x400, 0x7, 0x7, 0x396}], "cd2a3c1b474656ade34e045d8c793ec83e27e0c97a6553546d0e850326edf6d0083c44bfd3010b909dc8db9a9203028f597ded1b767c01608f589dee661b5385f2e5580db507e925eddc3d9c6582fc597bf7a5e3fcbf9255b674fe17106a23d2547049b4f47c91b4408eed21bec82bd240acd2c592be8b04848317db2852e2570ce3882f2db22c756f", [[], [], []]}, 0x401)
socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

[  981.810123] print_req_error: I/O error, dev loop0, sector 520
03:43:28 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x0, 0x1, 0x1f, 0x2, &(0x7f0000000180)=[{}]})
socket$inet_sctp(0x2, 0x0, 0x84)
epoll_create1(0x0)

03:43:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x8000000003e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x3, 0x2aa02)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x14802, 0x0)
ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000200))
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000583dd05ad2a7dc240000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000032000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000001e0beddd63b0ab978788a02587a6d78389104055c111aee0672d4e154c2065ebbffb923cb9f72873e5778a31271d38edf1ddd20c548c9ccc897d161b78a1fbe9a04d0b06ba78566660863f22d9ba32f72da300000000000000000000"], 0x120)

03:43:28 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1279, r1)

03:43:28 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0xffffff1f, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:28 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:28 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x248100, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000001c0)={0x5, 0x6, 0x0, 0x8, 0x670, 0x5})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2, 0x100000001}}, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18)

03:43:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
r2 = syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0x10000, 0x400)
mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x40010, r2, 0x80000000)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000080)=""/175)

03:43:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000009babb87f896241b80500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)
r2 = memfd_create(&(0x7f0000000080)='/dev/sg#\x00', 0x7)
getpeername$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10)

[  982.527908] print_req_error: I/O error, dev loop0, sector 256
03:43:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0xa2}, "", [[]]}, 0x120)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@remote, @dev, <r5=>0x0}, &(0x7f0000000340)=0xc)
connect$can_bcm(r4, &(0x7f0000000380)={0x1d, r5}, 0x10)
r6 = getpgrp(0xffffffffffffffff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r7=>0x0}, &(0x7f0000000080)=0xc)
kcmp(r6, r7, 0x7, r0, r0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000100)="f5c8358a7b7b478db39c0ecb0dcf1a1f", 0x10)
sync_file_range(r2, 0xfff, 0x80000000, 0x2)

03:43:28 executing program 2:
r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0)
mmap(&(0x7f00007d9000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0)

03:43:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x800)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080)=ANY=[@ANYBLOB="bd0000004b8a40ffdad0d049a71498530ad01025f84bde8e2e51ac4381db92e0bf9f3cc311f2610d5f261aeacf3e024de9c25549168aa97e311ae9c2bf7ec6d68d84662389adb7daf8ef6d5d7af2ab9e2ae161493dcc4f7568ee1c35106a694a254de4da1dabcbdf7e524cac762d82a6a802ef8c1eb7e8e23d7a0cfc603f9b999f472ed989cdd7a69d4c3bb398655a5b56f4a17c0754bb675706057a30455ef27b0f30d1b7783e4daa2908b1b254606948af7b107172bd339b2e0688bba234f3a9"])

03:43:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000680)='limits\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)

[  982.703872] audit: type=1400 audit(2000000608.739:55): avc:  denied  { map } for  pid=16112 comm="syz-executor2" path=2F6D656D66643A7D202864656C6574656429 dev="tmpfs" ino=177673 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1
03:43:28 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x10)
syz_execute_func(&(0x7f0000000340)="c402f91ce065450fc4dedbff5505c4418573f024660fd3f0f019210f1a3e660f3a44230ef344d9521dc4817e1012")
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x7f, 0x0, 0x7, &(0x7f0000ffe000/0x2000)=nil, 0xffffffffffffff01})
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={<r4=>0x0, 0x80000, 0xffffffffffffff9c})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000100)={r4, 0x80000, r5})
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000002d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3878e9cdf737cf319b88495a0648f05f5175e463e2026e8bc29610628232faf1aac9509f6c7612014e89a5135b606129bacde2d0aaaa6fce0550051edbe34a73a971c60223f0b63aef02c107981b4e6ca9d31174ce8d3d7"], 0x120)

03:43:28 executing program 5:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101200, 0x0)
fcntl$setstatus(r0, 0x4, 0x2400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fede5ff115c9392fac90d8f300000000000000000000000000000000000000000000000000000000000000"], 0x134)

03:43:29 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x3c, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:29 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0)
ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/87)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

[  983.221879] print_req_error: I/O error, dev loop0, sector 128
03:43:29 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:29 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0xc020660b, r1)

03:43:29 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0xe22, {{0xa, 0x4e22, 0x6, @empty, 0x8000}}}, 0x88)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="74e4ded8b85a92a8cf1d99bffc4a74952376e57efa86954a7cc015466b043372547d7ede6666d5bf0432ccc92c51617917b0434d1fa5a698d3857a8d6723bc401333b01de499b2823a1e90dcb120536a20370ce6c006cbab2e376708e6da678dee9739c0c5d13bdd71c93af585195d95e3fe7174c82b77c2ad479935a1313919c2cf997b417ce7fc847eb15c9525c78bd76679e2a3ea80c818ff5a", @ANYRES16=r1, @ANYBLOB="200025bd7000ffdbdf25070000000c0003000800010001000000080005000500000008000500470200000800060080000000954c9da8029f18a8c1072aaefcc688cc895c02121cc7280c3943c127e229ccf2423c95ca0a8ad113b4c408d1eca8e180d5bb56e3a5794ccf33d4e92f7c9a218ed05f036cf5133348e27d2d39335b6b9a4762ee76753db2"], 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0x40)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000440)={'bond_slave_1\x00', {0x2, 0x4e20, @multicast1}})
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400)
accept4$nfc_llcp(r4, &(0x7f0000000080), &(0x7f0000000140)=0x60, 0x80000)

03:43:29 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580), 0x0, 0x0, r0)
add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f00003ebffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000d6c000)='\x00\x00', 0x2, r1)
r2 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000), &(0x7f0000000080)='u', 0x1, r1)
r3 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f0000000300), &(0x7f00000001c0)="b33ab76079ebe0d14f729cd653e520d29ad7ef000000dc4c000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e2ecd3fff32853747eda22d2818d08ca27e0ec93f62113e33e5f8c7eba67fc19a9497f5b87e5849d2e875b0687d6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb46c1523b8a25e71690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6968f6672f98f7e149b00000000000000000000000000", 0xc0, r1)
r4 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0)
keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r2, r3, r4}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={"67686173682d67656e6572696300d80b037e485c5f00"}, &(0x7f0000000000)})

03:43:29 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x4000)
ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]})

03:43:29 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0xfffffffeffffffff, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

[  983.678838] sg_write: 17 callbacks suppressed
[  983.678853] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  983.678853]    program syz-executor5 not setting count and/or reply_len properly
03:43:29 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0x9}, 0x2c)
syz_open_dev$dspn(&(0x7f0000000740)='/dev/dsp#\x00', 0x0, 0x100)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='cpuacct.usage_sys\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r0 = getpid()
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x3019fe, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
fcntl$addseals(r1, 0x409, 0x0)

03:43:29 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000100), &(0x7f00000000c0)=0x779496e183db284c)

03:43:29 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x2d, 0x20000000000, 0x400}, "", [[]]}, 0x120)

03:43:29 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0xc0101282, r1)

[  983.829691] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  983.829691]    program syz-executor5 not setting count and/or reply_len properly
03:43:30 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xb, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1004, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x7ff)

[  984.215241] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  984.215241]    program syz-executor5 not setting count and/or reply_len properly
[  984.234078] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  984.234078]    program syz-executor5 not setting count and/or reply_len properly
03:43:30 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:30 executing program 2:
r0 = getpgid(0x0)
getpgid(r0)

03:43:30 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0xd, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:30 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x80087601, r1)

03:43:30 executing program 5:
r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhci\x00', 0x101000, 0x0)
r1 = getpid()
r2 = getuid()
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003c80)={0x0, 0x0, <r3=>0x0}, &(0x7f0000003cc0)=0xc)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000003d00)=<r4=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003d40)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000003e40)=0xe8)
lstat(&(0x7f0000003e80)='./file0\x00', &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = getpid()
getresuid(&(0x7f0000003f40)=<r8=>0x0, &(0x7f0000003f80), &(0x7f0000003fc0))
r9 = getegid()
r10 = syz_open_dev$midi(&(0x7f0000004000)='/dev/midi#\x00', 0x2, 0x0)
r11 = syz_open_dev$adsp(&(0x7f0000004040)='/dev/adsp#\x00', 0x8000, 0x90202)
socketpair(0x1b, 0xa, 0x7, &(0x7f0000004080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = accept4$inet(0xffffffffffffffff, &(0x7f0000004540)={0x2, 0x0, @local}, &(0x7f0000004580)=0x10, 0x800)
r14 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000045c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
r15 = openat$rtc(0xffffffffffffff9c, &(0x7f0000004600)='/dev/rtc0\x00', 0x400, 0x0)
r16 = getpgid(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004640)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000004740)=0xe8)
r18 = getgid()
r19 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000004780)='/dev/rfkill\x00', 0x0, 0x0)
r20 = getpgid(0x0)
r21 = getuid()
lstat(&(0x7f00000047c0)='./file0\x00', &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0})
r23 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
r24 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000004880)='/selinux/status\x00', 0x0, 0x0)
r25 = openat$urandom(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/urandom\x00', 0x8280, 0x0)
r26 = accept$inet(0xffffffffffffffff, &(0x7f0000004900)={0x2, 0x0, @multicast1}, &(0x7f0000004940)=0x10)
r27 = socket$inet_dccp(0x2, 0x6, 0x0)
r28 = epoll_create1(0x80000)
r29 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004980)='/dev/cuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000049c0)={0xffffffffffffffff, <r30=>0xffffffffffffffff})
r31 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000004a00)='/selinux/policy\x00', 0x0, 0x0)
r32 = openat$uhid(0xffffffffffffff9c, &(0x7f00000060c0)='/dev/uhid\x00', 0x0, 0x0)
r33 = openat$zero(0xffffffffffffff9c, &(0x7f0000006100)='/dev/zero\x00', 0x12200, 0x0)
r34 = socket$inet_dccp(0x2, 0x6, 0x0)
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000006140)={0x0, <r35=>0x0})
r36 = getuid()
lstat(&(0x7f0000006180)='./file0\x00', &(0x7f00000061c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r37=>0x0})
sendmmsg$unix(r0, &(0x7f0000006280)=[{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000500)="184c3503b599d62c98f605b6521cf01cb6197a0a1930debf23836233155ffec1f40040535954ecad4adebfe346af603efa9c7695c544a4625d1ea7d2dcfb8960f758721b48efa2017acf8e984116e398875b49566e214ac9a3330eb751ad9e72f94b9458a9cc12aa94fab9bc422b773ce1e21dbf671c17", 0x77}, {&(0x7f0000000580)="d0b36553bfd4220d3c838f6e35821745ba942916e7ffccb27bb9be67c1c7ec2c234a932663fb6be58f63e1b947c885d5bcd04f0e4f1f2e26d3e0a6367960108e6cf4b8c09b9bf721962190bed72236647369cedf6644564c6daf0508aff6d267a88d1b04db5dc5dea1a73419b9d4da01d1bfa9fc64059b5007a73f1c148d26244edd916fb65f636edadac11f2597426f2ac0d384810619d98d565d2ef8284ea39b4cfa6e6cc274756e220e716a2e98", 0xaf}], 0x2, 0x0, 0x0, 0x20000000}, {&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000000700)="2bc3cddc6c3fdedc6f2f265eab13b316a724b9cdc5baff8628af844dab382b5305df0dbf5abfee878995d12bf61eb881d9ae4d", 0x33}, {&(0x7f00000007c0)="1dabbc9b3af8813959483dadf4d0a1a768b6cf8c7069d3a526a2d1529ba5d42e92ffd0d459fe75fead70e73bfda7800eb156da769c1c9d8411734c01aa62110aae9f07e8790bdc5db3237c728d11d24cd8c4b6c9939e513d6688264211392aee6fbfaed959eb7f7cd9054442527e2537c3a7398e45e490798db95515fc3c1d98551da87535532d1bda6942b6c6849fb8f80844646cabd3db642e6d201de392e0401e4380ef5994efb1e3ea182cde43630b888cac5fe2ee97d0d1809ea239adc0dead447ef9", 0xc5}, {&(0x7f00000008c0)="88c3fe36c4575024a89875d28b383b0c530242ee3da4d0937a835ed44d2664bf212a20bdcd31e611ef023bc186b0e5a13de1a521cf29757439f9a1ba73914e7980eb9738ad0f3d900570051088e8425ff93d8fed0d33ca3e1efe7c1331d2c6f24cf87fcddcfc9d2da0ae47c0775a79458d45b1fe1e952edb5807c5fcc166bfd192c9c4f9a01d5b5d9f0648d3fa23a0d7176f65a7eac9f3b469982bd2e02d97000d1aee7a02e65c372af24f1d0edc03c5", 0xb0}, {&(0x7f0000000980)="5b2a524bd7b37d66a1500dd1bd9dd74c7c78f8a80227b8ff61bcfdd903d8abb95005e6b2c68cd8ae7adecdbc614859e72dbbb8dbb37662af0157118ff8621bb2c97f71358fd1bb8e945b55b456405dec8479fffe8c6186e25e38cd6c4382476dfa9bcaf3a12c50d891e7185e5f5b3194b1a59d073f6d54447efae568d4eae2fda53ed34abf9e46606abaaffe893d89dc138e919eeae35b081225a2299c4663fca8c7e39d135dd6274b3a9e401f9224015cc97972a81a8d2da272dce67a08f41c389ba1b69cb3c85ecc0d2292a5989225bfbd79541c62e29c9627b78477526b78114230e279095ba283cb7b5dfa1f551c59778b715c6a39259b3bb4d3bea3df6c8a1fd614ee37fbc7a91b83dbb1351ea92b02aa60fc2e8df303bdee91e230e9d9f7de8a0256a22ea0786d995b8c26541d4762d7328b8a42a142192f0a22ea6e9cf867e6a64a73253b09edd78e69fea75d0548a5a8f8360b4ad379ebcf420f9572e9c1969853a90afc17b266e946adc4fe337e3b83eba970b4443dbaf3c28ec951b195377e485eb1d433d78ed51ab8d4fb2983813756472bf2bf4da846ce5abe277e4d3c527d9827da01a46753b15f4499c100180746abd2a8b28476aa9422d4133e009a0ded2b79627bc8d69c08a429b1e96981b2a69eef8ae47cf3c4d0863db4f5e832ed8d16039c102776310563e9a426207fc0e8ea0e6b2a6c0eda5637ae422a8c42c98f5ae74c576e02a61fb622ad4886bc03b59d7fbb3f0395c868f7e71dc7c13185b904f38ab4697dbf23acf5e279143ae7a15deb029a9c0e7072fb8bfb0711568b9b24b6158270b130183cd8e89edec31ed13dc24249e5f09dc5d72d038857937c5b769dac9be14aa86c195b12ebe16999c00ca96cb8158b69c1f26715031931020fc458eb9312f91c3b1c75f60d6a70eaf4ab0db22c45678738356a9e7b9bb8100911d5c04d1502ff872c4742a07e4bc9b4037a8613cf10abd5f9cc3f348cf4b93396836490cae2d606c5b686b8dc08da7b4170f75c6131ab87eaa1cef0bdb34151ecff5a44937b7c015a62514387871dd0e91e15c1b35112776860926c09be921dbe115aa6c8ad2e6d7b380b0ca4ffeae41d8889be34547caf14d35a48ea3c58b77efb4bc962963a61fb1ca6da40154ee79ba189b16cedf4118f240725aaf6b3f1fdff6fce16f90890c818e5739282b2f6d449525136436fd3f8a9630875f3b255cc056b5dcdc0a2d2e480580632b890abe969a06989722dd955f252f075e4bf3befad21da5270178f150faf78da4cbc8d52669a04c21d1c06aab86e5ef311bb5d1ae7169f04d3d085df9370e62043b147145ba93939e5440e1d9f300437169f73beff923879b857599af700be700fdf62a44bc8a14bbda564cf16671bf05a51382c15a4ceea364b635ce6cb5272f509887cdfbea8edda4ad7bf81e19e7fd905b5f8c420b929060271bc0222928410043ef067c3de1c734150428e770ca6b1ec165d7f045295d05c21d8c6bdc4ca9ce3f7a708dfc7bd2667c09eaf128f0d2ea364eb38b2b1279df258fa344a27a56adf9d00682adcddf150403f0a4372b55c120ddd21a1c053dc6326f5a5f2e9c478a84fd488456ff3962999ba01481a37b772959e731e0ae74896d9ce386c672b5d861d26f148bee8c2e3131b1117c0ce66e8e04367e90bb6f23659df93564d2112e2f9205c31fc90a199a8b2e21bc77a9c9f27e5c0f68a84e2515e6a2f8a126dd1d6ac1c2bb8a7c3e27949c0b0fb19ef721fa4ba8fdeda9b67f9c1dac624d28cda4ffc46de42e935716e80cefa61660b83fe1b5d3d2dd4aaed61761e02225fea498e08307ed7efcad4dcfc3efc37ae863d449bc154f78ec1f37a0606c8475314802c2e8754dc6583415847c2a7b77a770beed0f6014d73433a28c123f0f399172aff8d8300f965023a155bb98da053e638889daf5a0ff3890b5ecb784a17e772a040309567e0d515d08c78f950eedc261d30264b1f52a7062df724b560db882f859f0d3628258af7db5a25fdd55e165ede4f831c96bf5eb8f053ab2c0084aa43815cbd2a95b81f4e25c52e03429bcb40d467affe8cbafebd32747d290be84d800b488991862a7ffdb1bba750bd2000f62d0cc5593e050a17db728f597029d566acff710b5594a0f7b76ea37a482418e3473869e35d7e46bd06f74e143ee181aabccb1276077666b9effc7e154f075a768abc4d08c2b750a7222d77f43ebaa7be66a0e8e68af5424b67574a1d6ee437ae65b958442b23c69ccfa4b42d8ef92a6f81946bafb5a93b4d8d11e843058f72731ce0f751a3ba226c05acd15ddb1f2564eb76780572392b66ca5ba15af056bd985fb79eaf99b976a672f1643fb614b9790915d72f2be70fcd6dee96d4c8f0e9b6d3ea8b45e8da4d28ea34545a48fd03813d7c4fec47729c4f083192b66f723906558e3adecb560cfcb14bbbd4f62c6044e9233c3843fbad95e6cb2e7e71252005f2a0e7fdaf9011c8938a8ae0bd244b5d7d4a33b7a1fcedcdfaef8da17030f83b4e8c42d9f4604a932d114e37d095462ac64059c514590ee856aea9312f065b1e49e4b1d36d91fa490b4d66ad9f61742b4d36d978c0697b32216bee28ef58aa19de0b5a78c56490aa4529321041407012fd62ff37861458380b5072af8ef404ad6e9cf1a8dc8a5428af0330eb666479bc01241176299284f74902eace9489a663a88638ccfc00fb1ee1d0626aa1436b3ec58d3ef38bff3db7feb9b40cf6318cc567d90bd87d9e2a4af62e1287c7610713b6606d8b3f4edd873d46ede2fa9be33c09db2baafb3afba8aed4a9ddcd57e4da478524a1bfa06cdc882a450bc3d2527e74106f5b8aea01da8c0b818f59fa55a5a500d610223a88ed22b9885f3ed3822aad0067c97700b4de20a61c8e251a7379980bb7d89113ae70595c1490d29cd61a92763fe5801317415cd3d7b51a7c866766d37637fded8eac05b39e24cea058a238138f177ecb8157a5b1c45e51c5be56195016af0c665c4818e9a37a355a24b84b67455db5cdd25e2f5a64b1900f9fc1798013f81f434344242d1980f2c0db04784e2cd42e793aa624c0f628893c470d03916dc3c23f4c62762beed14fd9f1d1f71dd16916529c0d5cb2e7420520a00d59d389c182b8ecb75bde7217163ad423f4aeb2104562bbe2330fa4c80120ffcfb381e09ee326a1c504502e99338bef4391e635be5b3546deceed69fb1f7c4c5c934b3f9a429ab86fc923df498042b128903046bfea6f6273227713d05d4255c0a7fcecae3b144fbd0fb35c8c015f21c907d3ea822f9e1060bc14300abd32e0bf3eceae83e12da8fd0d8b5249db3a8279074dd026c80fb522378f935b4919fed5ed6bca30146c987c463352358f49000de35c290a1057f98a59672073107b84eaf9a42d5ab7c4b5280dd98b93b7ec2de9a62a54808a1a8c4f918bdbb8e167ec283a52c7ed3ea9ac5c1212e9e681335526185e09322753e9928ba83b3012c0ecef33f754577e6f8aa75dcf6175370ace0faa4a7b654bd7e19bbb8cc9d87c90f6d5480524dba3ca5904e51edd3852a883a855eb4edc9fde45829667bacfdd9fc9b4d1cfd9c1be99ed449882f95f2cab41b4369f24bd396ce4ae9edbaaa6ab88566789fdbb860dc7f79fba0f590e6b417e5e9bd2a6e8e936bcfe91b9902ae3e639694e2c75a9229b7a988a0120f4dd10b155cfad2a396de30835088e1bac4430e0277add5df36051fdd8dbbfefd22fcb43abd655354230c94bb92263c1775002c299189a34bb1ebec853e66ef7f30fe7961760388aad6ece0512fce48ea5103e5394bc1c62526d19c6920230afa9593a09243bc96945b8bf00510dd7703aab3f8a6e762e0e1698849b027b2e23718a3678375679550a2450ceb902c280f185d7cc488fbd439ba98f1b06c9d40cbc9957946f2475d95355dd717ec5db4766749ab6873ac2ae111cec41bcae843809a9cf70c1d2a239ef135aa649f77fc5ff80cdb99a87bf60a7752524408d10f3c1e17fab4a153c0e01e9c9aa2baf5ed85b2e6b1031e07b718a0f8afcc04ebf53c4b5d22acb4f84ead0df68794986f3fd3f702a6c44a00f476dd42652d159e8d89ceff5597057c09d4863c3c41f4fef8f4d14848ceaa7c304715680865a6c7fefc3d771ccca6c021d64592e1f84681779b525f0a6d4e50fbb6cda16cc129e4e2e6ae092b85ae18d432b61233bfd21968bf9c3570ff79006fa7db1503b47855f0cff84ac4c6eca9f391e6e920ef5699ca234ed0e2071dc83d30cceda79db938d5538deb3c07373e43eceb536dead91a48dee238580cec1eb6217fc02398390aec1c89acac0cee543f5d664057ecc65e9b54ac995bfa3b827fab75f9e02041958f5fd094fdc63e50325ac7f57c0dfcd57e96f51d755f4503a18b1cc42cd8f4a8c962a04b214661d2e581169540d9327098f31637e87fb9a2846a86acdad12cb7f532aebb2dea3e4c5cc81dab9d5f1ad038f8324455de36e1347ab105a637e2fa9fefb8e92e227bd4eabeda7127f1814fca9d2a911db1bf6e1ac3fffd4c7aa85880b57c5d64576820f48294fe24cd5a1b9fa729ac1b932383f80a47c5efb17bd1168bbc40702e64cc5482b46fc0a5eaa46d75c0247456509ff5b57dd36e5f563618fb21b832581aa673042dbd4ec75c02233667731477d90d536abe87cc8e1de414ee6282ca9bc982b311bd7fd54465a01e96c08243936fdf35a8d5bff07fafa895b3f8042cd151c0d311f082d5804c6994a7bd4d6976c21299ece3b9b5d8ab3d91382c7e647796a2a8d6d8f3dc0936b91f30bc5ba394e28cc3f74fdaa11bb1860123801d33f5a9dd4185a031117a492917ed4f8a54c6662446d42a6fef96301a0c57003cf90721f7c153074ba8612dd08042c679fc4c2a32fd8ba77a4d3cdd768c15ea5d3dc2a9fe1b28ca8791d4d9d83c87c81321be686ca7d1d50a2b4a6bd7a56e968f43111f3d587e367417e4b074d5e7c3f50f2a9a950369faccd5776dd990aafcecf11b2682663b486fcba4e0cdd16b5a2c2570b9166d30b59a7e78ac4ee8c14f82f8c290ad30197ce247aea77693a113d38243ac393a8e26c1244d9a667016d18559304d53712c82069f471979dbd484ea1b4a999f01afff98108eb911cd2282e94490b505ff854051a49ef2e40c7360748b50965cc418a70c8c151422c5a8dd685891e921ea2a47a7c7677a5cdaadccec077f881978b78f8051530fd878e8823d508326988f0ec9967ddc6baea10174858c4e1ad382ee273424ad09e743309df7c05e1f1fc40410f8437fad7679924dd2ccf7753e58a1d5a568be9cdf1adb42e60d6ffac524b57d6259361aa4dfd7a2fc5d7a0253a80983ecac0adf40549ec0f2278b0f7553ddeb12be56c73876cb3c0aaea0894156663894ea640d61835dc8ce739da1bda8f22eea57c8844bf6127d5b262c4688b777df6ca3b37fbdf25ff193f1e70ff0cbeefdf7671ef1f7ec403b45ebb9c04308feffe065f58d2264fd9cb74235e11ca32f5d4e6f7c90dc582495a7612d9e1870be0d0cdfb27317d26f063b1044d3496e81887c40f1c522b9963b210bb8712ecabfda382767100000c2b1e9bd69406b2b694a55009dcca4803625ebb41295c07572c87f7f191a0cd6dd7fd90d22e0b3ba6bd1f33d5b562927ff8c318ca2ead31713eec213f4f5beaa09af81c866c4b6c3f8d2e71fb1e7a4bc5a5597bc639441995f155d08895026fbd014abf38f71d3b6bf552c5dd9db5f932b18bd3e51bdfd00fb58385f9bdd434e511879d", 0x1000}, {&(0x7f0000001980)="47a10edca79c44c39f94b60fa8cebfa498f7dfc5a34b3a029aa8c91b07c4569af06fdebe74154385595c64500be9c7c036ab6abc36ec4f882a2d93d2c61023c367e515ecb8546c36e9dcf19b2380b4c4e4d68b9dbb71bcb79ad97b79e79f1cace21ed9044ab873916c8f642887ebc8e0dd79542bcb9db6845399b2b9451491be24b4cc6798f30e0fbe485bccd2456f8420b2b016ae3c9bf99c7131f7a7c69289545b5c46d0e620d26804741fb29938fb4cc51686e18518e2bd1f567d4d375c4c50d5ebba6398e41d05c66e5a70150804d7e4389243a2f8a608d4e97a62ae2fc135052f59339743801286", 0xea}, {&(0x7f0000000740)="a0e5304b1dde379c957c11e80211", 0xe}, {&(0x7f0000001a80)="d61820121f39ba7fd0246e59c33e561428707464fc65689069367153c317e5a77a12efefcd055804f5880014d88ef3a7e9911a88ada97e220948ce466b87c8bbe01dfe145d96a2a360d6f5ddee3dbdcea53829cb6f6493f82b846bc568d9d5fd9b8e5407c4311a43b57b18c1ae2edcab07a7235f15a44082b352b66ba8a346f8ebd49fcd58ca9dbabd3448574d1174e218c24e14b2d2c6f0c6345e9714cff031573ab71686960e774a617be6cba70980a71a9434", 0xb4}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="08461fadc42b9412423c2320ae865dc36164cb6744cb5444be6a6440bc22c118fb72e37f72a11e94ac649c0af7c947880abf06c6bf86dc9d7531142486beea5b9b66d2c56ff59caa85319da54be184684a1410", 0x53}], 0xa, &(0x7f0000004a40)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x28, 0x1, 0x1, [r10, r11, r12, r13, r14, r15]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @rights={0x18, 0x1, 0x1, [r19]}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x28, 0x1, 0x1, [r23, r24, r25, r26, r27, r28]}, @rights={0x20, 0x1, 0x1, [r29, r30, r31]}], 0x128, 0x20000000}, {&(0x7f0000004b80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000006040)=[{&(0x7f0000004c00)="5bd7ce6813cef08ab3ef2704c5f4f04e3ecf3562423e7de2e58221d3b48a1a0349b36b6830d3b7fcb4281b78c6931f19f56db9b8d0220a44ddc2e6bbd4413ced75c8cc6057c6ceed924bfd1d92c85110fea98968c491824ad97a9d9cdd0a3273ea3c1388188a18d91046939b4c27f5f01eeaa43fe31d31a722c1d4157f1d2ef6042345f633bebb707d5ad469f6196251042a715cabd3310cbc4ac367f93ebd94211eca767e5781ba92494a5330ea9f64be9109d8fcf47204bbc51b3353ddbcd53e03af7daeab48890dabc3e47e", 0xcd}, {&(0x7f0000004d00)="12a9dc1a203023262bc141fe4ff65ac8d70a95879f048d2a78b2ed187290b7cde8778e2c28be92b1fa895130a953e17c76d6f25e70ba402e75418c8bfc87f3be350e4f79a12e2ee054f9018e6980a65a71d99532b51090f529746f7ba276daee2bc79ab94e75246d401dbcd1e5a4dd88379139a1641c42063a27b31e787465d22a007a49028911e2ec44c5c7dfba9574a342f163b8626dfe34fb5da5b43b23664909a80b4f770415cc3fc39f31c5b671f84cc4bb0dc4a9f1763773e6208a944005229bc2", 0xc4}, {&(0x7f0000004e00)="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", 0x1000}, {&(0x7f0000005e00)="f0723a1515919e6fda42621c76c270b2109fab68f8db8e6b6d6500b1d7b18f909b0a829e28beea1e8b90a4c278d245b494bb7b07c8a7a165b3c8e9e1a5f1694552d3e16a5c0aa1c470f298fea1963826948b7c13df64941d9a726d53af0d4ad0b9a3032c3104ca70a72d17b1aaf0350db5fe7e860c47da82dc5e7aa74b3caae31e51956b877c5e4a33784b1d0df6f917ac757f275256c0dbab98ae440a68849a6245e4fe108090021170dbca15136dbb9c1ed6f5b627ee294553ae28839f59a91315f4f7c964", 0xc6}, {&(0x7f0000005f00)="3beeb8b95978899c5dd25ac9192ccfb2b0f3d494b19b2478353247121124893f0a865aa0ae53d9b337dcd25234686ce4d3b9b5e4cb883cea9610f7c15fa1194504f3c5730c94e721ac26318734db117ac3c4171cb07b6234bbd202", 0x5b}, {&(0x7f0000005f80)="22c8af1cf74baee6270729d47d9c1b0f2f2179675aa8aa527967aa5f38d302c2fca771b7864aa8f64248f97da1c313013be9ef38b3e3ab4415963c", 0x3b}, {&(0x7f0000005fc0)="6a8c37a5eddf2b8196b2438f976ba04d8a112c1609aab4a83288e2d00a2621ab984fbf2c488e51d8445f9f269bd9f039897249b193a20c6d6ae31f024305094834ce67f0cef0dac2e5e7bca8e6a2a92ebc6eea7599de65200e021024b5af1a20caa212f1a0d520f6af4bac449be9aa8b6a", 0x71}], 0x7, &(0x7f0000006240)=[@rights={0x20, 0x1, 0x1, [r32, r33, r34]}, @cred={0x20, 0x1, 0x2, r35, r36, r37}], 0x40, 0x4000}], 0x3, 0x8084)
r38 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
write$binfmt_aout(r38, &(0x7f00000001c0)={{0xcc, 0x80000001, 0x1f, 0x5, 0x75, 0x0, 0x299, 0x5}, "cbdf3fdce183ba51ac87e138413a8f3e07ce00397447ff6870f61c873bb25cb73cbc2c8fbe4e3d0a1e428b74db80ddb069a62e396e576f73bf58595ac15df2aeff5501b3f66e812de551a7ca41fe6938d55cea21d781f0753153b4", [[], []]}, 0x27b)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r39=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200)
write$binfmt_aout(r38, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002d000000000000000000000000000000000000000000000000000000000000faffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000009400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000933b5e0837b0837647cba87726672c3f3e630aab54144dcbf7fb9bf05224602743912c6f8fc44e84f0b2a5296b87d4b2cc094cbb0b2df3019e3551"], 0x120)

03:43:30 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x380}, 0x2)

03:43:30 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f935300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x120)

03:43:30 executing program 5:
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x4000)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000380)={0x3, 0x0, 0x7fffffff, 0x8, <r1=>0x0}, &(0x7f00000003c0)=0x10)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={<r2=>r1, 0x5}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x3ff, 0x2}, &(0x7f00000001c0)=0x8)
r3 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x208c01)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4ebb7201)
write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x120)

[  984.831924] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  984.831924]    program syz-executor5 not setting count and/or reply_len properly
03:43:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
creat(&(0x7f00000000c0)='./file0\x00', 0x110)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0)
syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x80000000, 0x840)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000900)="99d9cd3f00f1a3fe7c738dd49c158792ea04b3f05a01e13f1f392eb47ce418479092dbb597c70e74fc9f42632860f1b5921087431059b7219faab99de965c3382e772290d1af6f67ca16241574ccda684ec7fd83e5f18a49a4743e9b74dc3985d3abefa9ca49fc1637d274fd75efe7bb26b36e1ec84ffa14f755b989a3369a514538cb4d5f5ec0254320c142f4bbdf38ebc335c4e754b2ba79c7ffbe2165bc3fb805d8c93ffb99336571eab9c1635926d3e7fd6dfc2c83ff5db3230ad5e67765467386f2ad6310bf2de102bc10145b4f78155f2ab8b890eeef29b7fd903c2d631fc320dfa60e428e502e101d9e5a1ea02ba278478e800b87c21ff5ad4d5d34321bbe5b291bbda6adb57748ebcd02905e743b10932dd535312dee7cd031ce2aa9d10edfe869219dc9eff622fb5a385e8e5eedb9927609665d0750669a5bbb26818a2106e719c16c03424073d8174c4b64299a26e0cb63470f3beace6d14cacc480b47619fc40bcbbf84937d161fd54b203956bb82db2cccd99482dd2473c84e3d7068582a9ac826f5b19df46f65b45de99f576d60ad97075de2ffece4c9e2a2fcd537d5248c3452b5418ef1320163f06db2c00b0ec41a497c6eaf032e5c67f4d0d1523ee2dcd97eecd9bbd6c3f1e29c17c5f3865aa0a69027d6ba2c8b12662f145e1b511c8db3050f5f5c72d85931ce9762f9ca920690c220d5fc820a93a52ac2988f5570fd26edefbaf132f63df5fbc216643d02cbf075eed10c674e440d56f00e84d3fe8209d3be140a890ab2e7a953e006298382281195ee8d86c322777e746148a4a864644ab85d8e78c1a3ef72644792f70e5812fdbd5ae83cdca5e488e43df7d927d16e61c482c8bf6b829c5cb74dbf37bca1a54beaf9b348f9fa381ddcb2140b5249eaa1c979d6e60684647ee04df8ac688351e9c69f6a3aded428ed8b61c2e73f101cffd274061460b1a44af1c3d3bbbb15167ef7297f2a660f3be8c319a26ad558c131804ee3ac781e44231b8440700632d6ee7641934579f98c33e14f9040e6b860cbd44798fc2047f19e1ad794df38703f6e7ed65e1b933d1670879d3ac30a8da0c42891c0b5436decccfdaa95fd519d80264aa3ddfb07dcb55a42359c56ea65dcafa2cfd3c87862a05ccf056eae8bb612f8c3e7cb071a46e04bc91701e5d091c5b661c3feaa251e4017a916da9032296feb0dd8533cc51fd8218d22a3bb12cbffbfb335a2d40ade3543fd204d8b07fc07a08fb3ff99f039ad452ec62ca8a1de3e6f3ae01bafa23159c77bca6ca7825bb048a819df7041c2aae6090253dfc52af0552c071243522a208d162687a2b3a2582b3abd4273292b7eed563825727fc7e1d6038ba7964a3b5b5b221ad4244602249ac5032c0720406c819484dd6a0bce59cb9f133603ab2e5775d339bdf1ed7ec0beadd3337cc603eaed7452acb86c6dc3f4af0dc8911cf72d832348a9488825d61c33d794ee12ab62bd9e4fe878d92a1c6cff0679a0edea78cd1f36bcf6f791f503865dfc5fdbde92b4bbeb578a3b3fbb2257205aa3614b1578adc2e193eb6154e58c5e46083eca4803b0396c4b8d58175fa5fe0a497abb1b9a37f260a5860341ed91bf9df1191735265281f34b0d10d0c5b4993c094bd8e3002535f0af2bcaefd35dc867dfd119b0ce29c46e150ce6a668a53792a11430340f2d9bfa6238d827adb01443efe836b304cb0e00ae7422041cae027caef6c588353a1670e1132512cbcfb6d3a0908259380e3726276e30a3ee149bea338c84bf4dcf8c3046ee5db81f6b0a4e15d8d31be2d69521fc010a7d9332b3e7942e6b4ddbb1470d68ce83ebba1e2f382ea158e0f19dc5b27fa14956576b16840c0d56ce7d42dec0efaab01892ae934bf39a7a1d5a1db076a2af585cc94b1f591da7cd7dad8c4fcb90fb7bad3af8b63beee177bc9c15e885ec208b257c774d1389762a9746ad4636bde80d7e610383fa11252f165dd0d4484b0a62b3e3bd64881554ba74042cc0307f021f0993ad80a156502c24ac17261ac041f08150975c728cfd123159e50354a13e7cd2b341f87458c0ec52c232d0560d2e3797dbe353e94ecd1e79b124199907ab7bc293cfae9b6de7a30bb6fb67bf11bf52954cabeb6576d2e94ad4027adfa8831e784c07f30b2cf5376ac84f226cf671deb2e5267d4ea040f86132095e37d49f5a35b750752711bfac58a413d7ba8c2faf59ef45c5c5826afcb3030b72eaf881c6e41b5b981ea44d79d862011f49cbbe037bb8a6e496f621f1eff193daa264207016099d7e9c202091bbf1ff380837fdbe6f5d48c14858e50ffbdfe5bf310d11f7a859540c3b2635d8e8369696be0fe805797e687c23e8fb9efd36938cca3fdc00663a41bac463f4e66e2fef834b6cbebe4260b3072403a265a4d26ef9b9062295d50dafdd64b1574615e192514fe1fa55dc78b24b42ef14db8789b49276dc106f25289a804403650245cc331865a6177b40772d0cb7e746caa430eceb16eadbaf26f21413ca379082b87398718fec8f29871e849a94205d294698634a85a4ce998c63f96a6c37d7f3fc2d40090cabf6a376e4bacd231ed747e292bb84b8cdb2417a29a518655605c334c23a3199582824b4f8b745cbaa290dc7a7ef326537297723e7c3f4f96eca3dd4c686b4d7a46f9e0349bd8512ca8b6e6c6d380da1d7bae9788d8d80f0e9b0c60098a5973ed257674f1370d919487d03552a15568569bf01972712b370be6219f81ae70a2f7a9838cab1599bd76b317194fb7fba1346e76cf83a17eef5057a5f02babaf4e5da9248124d5ac367dbdbef8cc327c90f38ee79b7dffbad5c681f2a39585dfddd813fc353e38d239599bdda07718c649767c6200fedf7cf6308146a77bc5706ac58da5c00bd4f87a0c849c1dc9d77ed12ce6861ddc817f8f3550dafec7869ba57b3dc66746fb7e3b83a5550a52146d910b826b9374692563a0bc2e2feddf97a967820478e26150b8e37404f98373d1ada1c76a171bcecc372c0e194d517ca5b28d715dc5c4a64119539662c70dd24bd8976fea55553bee496d276e4138044f299d08614d9bd5253035ae564c90b0a8f8fbf983c83aaab8e7d66c2556657495e22436d3bba3d0ca8aa92af520a8bf4896f50eaae42672ff6bbf8fdec63943487f2110456ca40fc5f46db14763fe779eb02f6d13aa1675996e99cb3c3252259e6d8f73d68f71f5c1f9558061c61cde5283db982a5fe949d52878a802c09f7f4d7d055260881c3f51bd2056db93ce6b5110dcfeeb06aaf9bb339f70e5fa36feec6ce0c2444da8f1359e807309439a00bdf976722028f0ef0fce61e3d9b1cd939ab802833673065524a3d81d66613eac9106471274639a33ae0431ebaf8c331a8cd066946fdbff55681e3cfea282c39614f00f670a23f55b5d1486c2d6359b1e731697f1975890f21e2036d1a5877ce04fdc04b12013d7ed6b8a9081e1a26043da3e8b8e44c353bf07739a7738afc5589af954bba90227d32061774cf84189040cb2ddeeeedf7ffec42c0476769599ca1d55fadfb7de458c1ec48f7a2150ee47fb8bd595e214e114072df66a009ed3a79de4f98f8d5900ad3ccddf872ff3648d714a3d5f24c56582f75beb8fb142789b1081eb8c21e4399b2eb214c647074f6da9aec9f1700fdc572038e14e79a22cb38fdfebd85dc24d63d70c2073269ed979ee961d62b76e51d318695a3f8440ca93dd113464943552834b55251eb4d226bf176693fce2704892bdaa88ce096953a1eba9b6ecb23c5d7ee4ad6f17ed6a095f3b802dc5de411f6396e0c9ebdd3859f8bf7e9903951bb1c655cedc550193670489a75e192a128538a65f0ea58b752641e17c05e59550821fe63371b3b49a1c6b1b186ab2716db878fc7407ea040623d4ec9422c844441b6e48315372b7aea9e8f3ba6e5c1d43a37abc4472e5b6b2019740e775696e2ccfaa0bed9a2bb066037999c21bcd3b2129cb27d5e8d4b7c8b2bd247648e8334b4864eea6dbba45fa95b11a41a220f8c5f3ff8f8c635c2a358eee2dc91bedab968575c5ba042d80cbd7bb111f43c267dfb80f5d3c8c8249337d2bfdba2e37c2a0a836fb81015d0023b00810e26394fcb064a4406bbc00b2833d87dfe4557ef39d7a03c64d2b6eb83058301edc7bfb3a6b3d931d6510785b777ac758b2025deecf302f2208c4a39daacbf4b0b201cf76ab60e66a3ddc32b64040081ad0c9d27cc446333cd84aae31ce9fa312581065c194b5fa2e232224367820215b1a8f64d676c9159d8336ee2faf1496eb8495ca10d546398e7f12f90a248ef9b4f87b8e7ff5311f055cc654982705ebd5cc75ba2cb1dbc72d9654d2cb85ceae62ee8dc4df63045a3caf22e12640dcbf7ff26537c7b33a0c90f32d424fefb4a30705116a0f3e5202b41f0694ad188d7a6a036f0df29caa8ca3cc2414bc647375900a9ed11b687cf4dd3cb3ac85adc0fe663b0952fd38239f82d710c2af78ced099fc6e9589264b83666521f317f1f0e73699e5d58edff49a3cb79b9510d4f3e8100ab4c9cd87cf049f3de8471734e1695d6614c9bc409258888c3858e4683ea905f5269604d92eac3b9f5c8114ecff577eaeddbc42b55703ddc5a6540785707b5cc944d2922f139a979d3b0f9e4fd76bb188e05db5f5ea5ff6576f14168997c41574882ad5c29babf86ac4149c713908910301a591052de76e03f251d9be68f767dba20b1abec1c1faaf5a096cd7e0d9b6dda10f3297ec00ce348926f74a15c95392baa97bd321823de465d4f0f9c8a85d75613eada2b90e4726f4cd56beafce61df6cdd2ab246b66a3de7e48acfde0d37bbd7da023533a4cac6016b75386ae564bf134c9e459d02466e8166bd3539d9224c2d576b8d15db1fd9c15c3896d01eb04277816c0455ba5440e52c60f89004f763cd1ca975872c311bc0217a8450ef138bade76a64778de989d9488ca4705f8b798a1346697d7f07e7900f144264cf4bc42dc159bcc92d5109246e846fc58f57c8c48f3dcfb2210fb80596871907301dc3e6cf2ce6150c58cafb0cbee27e587617440ec636a905d9c4ad7a64dc7943e96ad58e69e7386acfb8a2341069517b4f784173afc0b8ffe52cc390819d094bf446328775fbad79840512b8c60be1014de95cdb8ec21cbff140dd7ff97fe38d90c8f3e133eec1be6b1d8b9ce45caa859ad799898f0689645ccf10b36a496e40fbb580a73d169f6043eda727ac41f7dae7d9f6daffd8422df563b0d15661e840de33a62c95bd8fd9ea166e6e74c6113a122f506a2e1680f98678559180d46e301f8634d875166a6458f4c845df3b72b72a1cdeab1f8e040a64fa4c88b14b850a5bfa1f133991ecd3e439eab80105299b6931a9aca14e56f5e4ec9e45437847d58a0c928206fcd4415ef7ff1ccb787264a6328da31fbf3e9d889113ef64fd9b844d9cbd48d7f4e2e4953655b2575433f7f2b7272843c0fb1620660cb9b980e4be44944ad392b36b509d203c61d06908cad4d4a3e88d505b93d0f31939326dcff685c614229e1a6e051ab56569e122788490a26e94e651d63fb26d7f554b5d5402514ce2a44850c88403a6d88d9b5b23251eacb4b33f19176d94dd149e71c21b5b6da28362be216a80026b48a1db2f0a35b64f7253df4ecbd700eed3b52d148473097efc8b2c64ccfb277e5cd0616ee195ebe750471da8cb352a6a503d8e3a20e7763d597ce0ac904a68f650f9cdeb14a74689417a905f6d0cbda596234ed113e9ddd0b305a0f708ab36ca090f3dd38d4f4"}, 0x10)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:31 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

[  984.912061] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  984.912061]    program syz-executor5 not setting count and/or reply_len properly
03:43:31 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x10001, 0x0, &(0x7f0000ffd000/0x2000)=nil})
r1 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000bad2000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005913b6208ae2ea5d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecb93c0de926cb45edbffd81ba0b6461dc9d4da69472047d9b83fca466a7661ef6630d87c1ecc95e864919fbeacc8937aa2b09274f150bda0d7375a1aa4a7176b51243abedc929b62a785eaaa52c35944ba7e0224cad15bd0efdb3211beacab0eaa20a632a0fd26f48c7bc801c7aa1f5aa3087b81a5c919ba4821c729cfafed5b7c9e9d5dad091f22d1920c8f861508c16d18595532da85be29c7a76ba63bf2eaecb5d7282"], 0x120)

03:43:31 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x1278, r1)

[  985.043148] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  985.043148]    program syz-executor5 not setting count and/or reply_len properly
03:43:31 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:31 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f0000004200)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/229, 0xe5}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/224, 0xe0}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000000)=""/4, 0x4}], 0x8, &(0x7f0000000980)=""/227, 0xe3, 0x3}, 0x200}, {{&(0x7f0000000a80)=@sco, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000b00)=""/217, 0xd9}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f0000000c00)=""/162, 0xa2}], 0x3, 0x0, 0x0, 0xdf}, 0x80}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/193, 0xc1}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/125, 0x7d}, {&(0x7f0000001e80)=""/203, 0xcb}, {&(0x7f0000001f80)=""/186, 0xba}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/182, 0xb6}], 0x9, &(0x7f00000041c0)=""/24, 0x18, 0x8000}, 0x1000}], 0x3, 0x40010000, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000042c0))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000043c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0)
getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$can_raw(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x0, 0x2f, 0x5}, 0x3, 0x2, 0x0, 0x0, "f3bf2e328bdaa181"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x8011)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:31 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0xc, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:31 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c06, r1)

[  985.737481] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  985.737481]    program syz-executor5 not setting count and/or reply_len properly
03:43:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2)
write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:31 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
signalfd4(r0, &(0x7f0000000040)={0x8ceb}, 0x8, 0x80800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x8)
write$vnet(r2, &(0x7f00000002c0)={0x1, {&(0x7f00000000c0)=""/194, 0xc2, &(0x7f00000001c0)=""/255, 0x9b4a1b9c09558cc6, 0x6}}, 0x68)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eaffffff0000f2ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)

[  985.824059] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  985.824059]    program syz-executor5 not setting count and/or reply_len properly
03:43:31 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x10000, 0x0)
ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000})
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)
r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffe, 0x2080)
ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3)

03:43:31 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x40086602, r1)

[  985.899153] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  985.899153]    program syz-executor5 not setting count and/or reply_len properly
03:43:32 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:32 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x301000, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080)={0x0, 0xfa6}, 0x2)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:32 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
getrandom(&(0x7f0000000040)=""/94, 0x5e, 0x1)

03:43:32 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:32 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
poll(&(0x7f0000000040)=[{r0, 0x400}, {r1, 0x2042}, {r1, 0x1344}], 0x3, 0xa9)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003bb234e10000000000000000000000000000613e30455fd86d6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)

03:43:32 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x127e, r1)

[  986.757761] print_req_error: I/O error, dev loop0, sector 512
03:43:32 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x301, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:32 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)
close(r0)

03:43:32 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0x80000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1f, 0x20000)
ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e22, @rand_addr=0x1f}, 0x4, 0x884, 0xffffffffffffff12, 0x80000000, 0x0, &(0x7f0000000140)='syzkaller1\x00', 0x8000, 0xfffffffffffffeff, 0x1ff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0xcc00, 0x0)
ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x81)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:32 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c01, r1)

03:43:32 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xe3a, 0x400100)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, <r3=>0x0]}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r3, 0x3ff, 0x30, 0xffffffffffff4e16, 0x7fff}, &(0x7f0000000140)=0x18)

03:43:32 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x401870cb, r1)

03:43:33 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000002c0)={'ip6tnl0\x00', <r3=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14)
accept$packet(0xffffffffffffff9c, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', <r7=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000005040)={@dev, @loopback, <r8=>0x0}, &(0x7f0000005080)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000050c0)={'irlan0\x00', <r9=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000005180)={@loopback, @loopback, <r10=>0x0}, &(0x7f00000051c0)=0xc)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005300)={@local, <r11=>0x0}, &(0x7f0000005340)=0x14)
getpeername$packet(0xffffffffffffffff, &(0x7f0000005380)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000053c0)=0x14)
accept4$packet(0xffffffffffffff9c, &(0x7f0000005400)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005440)=0x14, 0x80000)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000005580)={<r14=>0x0, @dev, @broadcast}, &(0x7f00000055c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005600)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000005700)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000005740)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000005840)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005c40)={'team0\x00', <r17=>0x0})
getsockname$packet(0xffffffffffffff9c, &(0x7f0000005c80)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005cc0)=0x14)
accept$packet(0xffffffffffffff9c, &(0x7f0000005f80)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005fc0)=0x14)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000006000)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000006100)=0xe8)
getpeername$packet(0xffffffffffffffff, &(0x7f0000007180)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000071c0)=0x14)
getsockname$packet(0xffffffffffffff9c, &(0x7f0000007200)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000007240)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000072c0)={<r23=>0x0, @empty, @local}, &(0x7f0000007300)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000007340)={'team0\x00', <r24=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000007380)={'team0\x00', <r25=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000007d00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000007cc0)={&(0x7f00000073c0)={0x8d0, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x200000}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xf0, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x2, 0x2, 0x4, 0x20}, {0x1, 0x9, 0x6, 0x10000000000000}, {0x1, 0x5, 0x1, 0xf6}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x24e5500f}}}]}}, {{0x8, 0x1, r11}, {0xf4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x21c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xff, 0x8, 0xfff}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4010000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r18}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r19}, {0x1ac, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r22}, {0xcc, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffeffff}}, {0x8, 0x6, r24}}}]}}, {{0x8, 0x1, r25}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r26=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002d000000000000000000000000000000000000000000000000000000000000000000000000000000684721515eb62ac8a81c3f0000007a011471ad618cb907000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000001d9ff7829cbef5fb68c54742b9b6bcee81a189d9aeebb8466cb46cf748adbf1ebe8afd93eeb28ebb155b3a12e7dce624016cc914b9ba2faa633401573ed144"], 0x120)
r27 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
r28 = dup(r27)
r29 = getpgid(0x0)
ioctl$TIOCSPGRP(r28, 0x5410, &(0x7f00000001c0)=r29)

03:43:33 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0xc0189436, r1)

03:43:33 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000040))
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)

03:43:33 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, 0xfffffffffffffffd, 0x10001, 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000080)={0x80000001, 0x1000, 0x7, 0x400})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:33 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
poll(&(0x7f0000000040)=[{r0, 0x1}, {r0, 0xa}, {r0, 0x4000}, {r0}], 0x2000000000000045, 0x100000000)
r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x101800)

03:43:33 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
ioctl$FICLONE(r0, 0x40049409, r0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0)

03:43:33 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x34000, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:33 executing program 0:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
getpeername$unix(r0, &(0x7f0000000080), &(0x7f0000000140)=0x6e)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004cb12a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000"], 0x120)

03:43:34 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8605}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x207b6cc8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x80)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
listen(r1, 0x200)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)

03:43:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000008eae71caba94d18e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004219000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)

03:43:34 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:34 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240), 0x13f}}, 0xfffffe78)

03:43:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000140))
fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
quotactl(0x80, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000100)="075981af412a0ff9b907b9046e3082005783ef3b2b5a1f53a75079439edb4b5b052b93daefe046a91731b810c1c42f8643850a15aed63f52570f8708")
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x80, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
write$binfmt_aout(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f00010000000000000000000000000000000000000000000000000ffb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)

03:43:34 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$RTC_WIE_ON(r1, 0x700f)
r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)

03:43:34 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001352c11dcb756d65584f3ef780280700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)

[  988.431536] QAT: Invalid ioctl
[  988.454873] QAT: Invalid ioctl
03:43:35 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x15, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xff, 0x10000)
ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000080)={0xa, [0x6fc7, 0xe8, 0xe83, 0x1, 0x3, 0x20, 0x100000001, 0x19f, 0x3ff, 0x2]})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000100)=""/138)

03:43:35 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x101000)
ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

03:43:35 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200))
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000080)=""/126)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0xf9, {{0xa, 0x4e20, 0x100, @mcast2, 0xffffffff}}}, 0x88)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)

03:43:35 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)
close(r0)

03:43:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
r1 = dup(r0)
ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000003c0)=0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4753a19a2576e0a5ea10050c656c2dfb2b16203d1e57540960c2e57df03de3f7cb96db0bbab4935a524b777f16db5753b27d9b731a0cad45da7b7510e51d26b275944bd32e051d72b6e479aee61d2d3369a1eacf0ed21e73f37fa1abe240d744b06e1bff32324692b5daff5988a314c400f13aa3766cbc8bbe9ac0aed5122683bb8a71e60c363e790af789bbf9789cc6bfb9715a8b477a1347816a8afb6a60029e5a97ed829cde82f"], 0x120)

[  988.995798] sg_write: 13 callbacks suppressed
[  988.995814] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  988.995814]    program syz-executor5 not setting count and/or reply_len properly
03:43:35 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)
close(r0)

[  989.077502] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  989.077502]    program syz-executor5 not setting count and/or reply_len properly
03:43:35 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:35 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x88002, 0x0)
write$P9_RCREATE(r2, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x1, 0x4, 0x5}, 0x1000}}, 0x18)

03:43:35 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x113, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:35 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
r2 = dup2(r0, 0xffffffffffffff9c)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000040)={0x1, 0x3, 0x6, 0x9bcd})
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000080)={0x12, 0xf7, &(0x7f0000000140)="9ff068f3322977ed7a46775d5c01545e91ab643fae0cd0db4ba0118f265912065216ec9e1e2ed82ac4193830491cce40245d03a3d11d1d49b68db7a32f25aa54aff61b31be90a0bcf548256e9b09131e7ac0e7e04adc2280eda1c851bdd5149341c7a76bda678128ab2cf6d39f43922c1d47558b7d20705d5017f7d6571b388c2102034ff2c974805428fb782f1297e2d13e4d9f3645a64ce0f8d522eac15926904ab545429ba5f495d2ce84ae1c4c95dc167fd9e9e3e6c5d31503bdc3b1fd8e4dfbf8040ecb3199543d1e34370f6b955df7a8ecdec339b158ed66f0ea05b153ef68cc03fda61cd2ac7da0c98a650450d13bb4ac173f81"})

03:43:35 executing program 2:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002840)='/dev/dsp\x00', 0x10000, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000002880)=0x1, &(0x7f00000028c0)=0x4)
r1 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000740)='/dev/autofs\x00', 0x40000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001ff)
write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003cb1c7ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000006e99108b8eb4baecf938090690d5067abf95faa9a53466313752bda075ee065052b7fccdb64b943eb3f8d484bd7bf9c6d5b0c454b05316d3c8535e00000000"], 0x120)
r3 = geteuid()
syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x1, 0xa, &(0x7f0000000640)=[{&(0x7f00000007c0)="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", 0x1000, 0x7ff}, {&(0x7f0000000240)="d6c86781b6869ed4e9772baa367ee52bbee188aba42ad8d69e9ae206b3428aa875748639dc72a02fb186c65473a2250a7cabd45d9a07488d84e4e93982361e08d1b182f02429856088d097e35a7a17b626422520", 0x54, 0xb75c}, {&(0x7f00000002c0)="46f315c097215d724246615a991a1776bed2325f73ecf65e1c5c45c271c03deccb31aceaaa9359a1a39be7144979a76a14b0207d3b79402c7b22c87271af5bd077dc84e131b177d82c91569c62a787a8a9cd59f6f7f9576bc930467a9e33ce041c74c09b9fb9f33b59261fd704ef245b471f8f639306f9923190e49eb2f6a3", 0x7f, 0x4}, {&(0x7f0000000340)="fbf39f3367f4f9f0f1d33d7448c5eb384d942a6700f39ac84f94be583fe8fbf20659288e42cced281269986a32c3c3b4d5566106053bf63003ff657bd5d0694020e17930d5cc4a068e22d02f2ac89a612f66bb42a435d171c6606f734373e0526d", 0x61, 0xffffffff80000001}, {&(0x7f00000003c0)="acfc97f0fd563e55e4af3ea810dd47d31d35fadcadea873480ef13e4bbfb7db2e4815f182b2c5213ef3819be2d94be91810ed642ea645fa49587c6c9564e16fba27341d51489c3868dc3d93321c9a118aab75ca9168e292d3d024e7c8454e2d1447f0d0861af207070", 0x69, 0x2}, {&(0x7f0000000440)="e850f074e20025fe5df731efeb87b8f1d01f10c422cb17ab61b137d10525fd958a29a1ecd57d", 0x26, 0xfffffffffffffffe}, {&(0x7f00000017c0)="503141545f1d06bb1147e93a0465bc8c7673fa69edff73656c63f7e19169b964f0e5dcf7cc9cd4cd116af8421d3d3399e00ed9a58e950a51f7821408bd147d3b241aee712be6f7035ffe80dfb2e6b83dc5103220e969518eb90bf73f7f545225eb285877b3c01c6d544e4180e6dddf3f2d9832137e4d779c2a28cc105a7426f50805b5a5e09e0785c125cf63f6c72645a4f3276aba3b8acc5b039ab68c8d60529e3a3c556b704933f1e4897fc049ff7556e8ac256365ff9aea4b5625a733ae397fc85ad0d869617cc78101e822604b049bd6e704162e66d3f266d1ca8427cacfd1b85847c3dd6a401d82441f68f22cd753e99ebacaa31dc46eb39376fab078703aaeb607651b2d02f86eb7077b0b4bdd752db522851095dee8a29e869dacec653643ccf161e757de2f9da9727fc538bd8164a67796868f0f263789d0460c618ee0009e3c38958e9c838867b2bab4b706c1a36478de8ce1eba3936574d8a3d78c7a3958f80b21b6e6b9200cebd947a4e7e443684072a6c67695e3910e6e0ff049d897caf6d63223cdfe302d08078b78265b84db860f21bfe8fff1fa9caefd564916d31eef051b6af1879ea7cf88fd54c0c1127db035bdde88fba660d2c6c221c0de02e4431561bb3defcffb94cdb711f60d9cfd55ad8553e8b1487115ccde5cc9b67f57461d425bb8e7e29feb89b2bc886053c72e8aae41cae5b3090be9bf4043d2f55ce090df2de14afc776caa1c791988e56612b17ba9562f3670058400602eaebaadc32be7c0b54e588eab39f6c0d38c1e94bc6543e87cdd8d94da616a4cf0af5184b63cb951a7bb88e8c1a14c325f236a2a3f290e12da8b1992c3a3c7b2083702f7c396e548f2338cce6ad995304d0075a346f77e87224ab1029d5592ab94cdc13b34dd4673d8e08e25ae4ba1a8d158b13c588be0831b501239ea1c84c69d404af5066c07241fe67fd0ad82663a1c5949f3075857aa24fc7fdd2624da233fe91a893170512a33d73d2747afa5024f58111662918dfee566bcdf5608f4ad1afcc242def3b40b150d80ab68ddf22400bdddea1281a80fb6bc81992b78e9055bc39da8329fd3e132af6f33ca55e835972b7f1ac0458f79182da1211ea05955f8e1e3b53e7c12f770d8311e9365cf04fb0495bfc4f291bbb31c202313d304c6928ce4665799d08305ff22adfdcc8e429fda4d0c4e5a5a7dc05a4effe37219bc6c0eda728f5b56100b4942210dceeea42836ed257cd42bc43095d1136b16c6fb6691cc67042e4e5db7c0f32381628e502cf87338d1ba6c559a106a5e6cbaad3089d1f6ee75ee1a7d07a3b8c5f39fd48b8840a4c3d4934ef2c8b24cf4a95059f3b456b241fe290e3e6445086bb76ec8c10882515afbd737c7c016684b9556a0efdae62307ec94b45afd1693c4e7e1811b099ed74951ffb29c0b07071d5a65343b3ad4dbcdf02eec99975564512229ccaac76d414eddf07e5cddd90f41f98c76a9149910c3302201cd68e72935efd5b14f6295df3863c4d0faa9b94a47ea71c299bb7b5cdcdc074d4aa296bb0bacc5908c27e55413f005db9b69b9082d96bd0dd11595372e9c2d883bc8bcd1bba9ffeb33445174ec240a04ac4041b947a50e2e1d52e2e3b1516395e11289247d4c62d69a87852589cd4716cb3b4455ce85ecaf7eff7e7d29758a0c141023f92cffb8ec0c54f4fb36178300f50820357b68bb52ddc28b376859b9db41265480b6ce3e80a7f32af9f9397db131881647a6c14a195d8ec9bd8637424b10a84e3c169637fe71478c237b93cd18cfab0f4f7ee16ba81e5b5394deb65824d1838bd7b5a0c19f509583c8e32547d9119616338b75fc4d0b93e1f772bf2f1bb1341a0056f19f8fc60225af7254bd21e63324c77f3ee482cb4b25d7bd2b17d0e5072a65b225dc95c35699656f5e841604062430e78496cbeb4fc58d86b3c4e60d4ad8ecd3837ff2a4fc94aff8732ba6a06869deef5c0254e4152807b36836027585715f4cad75132a21e8a2a7a3e31e48fe33ac3751502868276cec7d239dcb1cca5df1539b132e4f594c8acb84cf08cd6f5f22dc9e1974591a2e668a916d940b3e4b424349575f7a13b0b1b43d857d0bd6f868eccd9439e739c092fd2787db69f17c39c8094f9a455601028f41a497e62013ada8d1436887423d7b996aae4a207363d5431db5f6305e00166871044bec84cf7f8006fab454a647c5c70d34853d579f82eaf93ebd558ee53cf349f7f7dcc89c6596ad918e69ac252c9c0709181efdc6e9ae61bfff8b6a226e28bddeb4dbec0f47bf175918d0973266559e4b1ead596b7652105040925990136b773221c3e75a19e660f928063e0c57df1a74f90f87929fcec50d52b779f4606a773830ab2ecfb94abe700fcea57ec47eaef02dc1deba3f59fde2dd504d7b7fdc82fe3834d6d38b8810a8e443e4907b26f90c0ad18a401bccdb894cb9ab8f1a8a95961ad44df793e7527874b25cf7610217d2679094fb76b54ea32fc06d5f4a5f453d5316ae474abeb4b9ce99c3d32b771a4db8a809193fac60be50bc7b3e73921d6aa35341a9df3dfe6f93b9bc966970224c45714104854ebf86a1a87fa040fe45bf660e539e464435129b4c1f4b6b733595079f2b04b3fbceab02d5f6d0a1c06920d9c42d4c44ca1a09de5adefe002580e1b03767c4c4e780b6aaad5460168c9d775cb5c48cf6ec4e5d5cd4745003d29a93e455dee7b00a85efc02b2ced7fac9d3b5b2c344f11deb247d99ddc51b18c82471e38d69381de26543365670bee2203c4f434e60fa1c3efc8cd2d15db0233a0690c830cc2a60e07034de1d89488ee529fac733a683077cf306e62e2b34283c1970ba046ad44415d65a2969aff9f04e5361a65c34132c705770c562c5adc6dfc115a1e73a09ae6d2e30927e64e9eaf47221b28082cf6ddc6d5176beae2c80500b176e29f83ed29955deaa6696d4aa6f59f581c69a9f052e3f86edb68119e68862028588a8d674f93d058f14e22daac18cd7b27b2d8ac843f3633451371690b6eb4404c2703906280113a3c5bf5677229cbce3407e745cae1340a51f4192724c123b5b3544677ef2a0cb3eab9b0434cc9916facf1437e5d9b14596c50598a86b5b55959f21dfe729eb1d344c04b796f6b37230a471e5398383f24cb98ce618c6d22724e9f5c61b2142f5b27be29467965c12df4dd26a906082f0a8bed3074a3634baf3405da36f58521e7e856421ebabcf2433a6ffff703b16c3348155f7e4ef512f8f91f029a30a9e3c759d2ac365f6c354530f1fe28aa8fb627eeb7617497bb51f4a56823f8d167138fc3fa046d5d9b1b85c4da326a3fa1090f479eca6f61785c30ed17df5e3ff612b9dc3ab270e3a5d936d79fd54c1c09626a1cc4799af5fad1758541f1850d438ff2af8387048776120881f607408ed213caf6d2c46589bf6e3d10398d35045183dc89f135176ce3273109529b8bad01c558d236252479e2d1319ab1a43f4c099eea4f3df219f3a78f7987a537e8187c7c0bb143c170fa501b6e8ace0c06d34fe2ec782baf5aff04cad736da9548af107003cf77c1fce00d49170bdb8d302ef5c85b36796ddc11debf77e38316b9e83d5fbfc43908cfa001da2a19cef1de1e57e4d29b5403818113ea46de08c1c68af97711dd35d4dfd7c979b852f3980d2faedc98ff824050c73768c52f0e999bc802d57571763d882ef5a6bbcb711f73c8a444a0aa463dcf549893c2f42f4aa764b60269e53617206df500f8aa7739bb1eff1289516a6329e11816f97eb137cf4be25bfadc924b8d0438edf5a704e330d6ecbcba34631d6a5b29178aa7b929e018fcc05e459a8f9d9d8c0c80bb97baea1e7d5ab7a7f511d23c465df8e3725d297e823de3fdc1a7fe88a7e7dba18a359a6829b6b967a7ab339ac61f4f767114d7e8085934e19153d31b22ba7e2c7d518472bcc35abd80bb0ec6727cf6084f59ebcc424f34ab9003f492c638186a008189579a10a37f10b2773bd725e57237218a165d7bb06a6ab590efa48538e63a6a73daba549ecf067b4e4599f76d95789c9f155fb967862ff6e3b412e69cca09458f20e9e9bdcbb494f7442139e12bcb69222434d78db50ac48bc567908ce2f7ca7a51487d5c3b916d768da23a30e9a9a0e44ad5270041b3defbe5320cbb62a2aa09365e711ef5e100a9281fbeb1cfd96f22d2dffc0358ffd37ee2b85a05a2861868d62ab69c99f70b734377c3e31f91e4d6f480e7767c218f06cd0ebce239d5f76a6c0e74ed6685c52e749baf69d1a8cbc46c7cf3ad8c2b0d35f208032f8903a618296be5e32516a8bfb74353c4d0c708fe8638159691e2a534f097a317a7ad8ea6f56b2c9e729ea9f69b213fc0bea2e99a05d4a6c2e74081adc85646afb47e3df4d9f949f3db1ac5b495b97cbb127b831a834abd241690025b5b8fb0034923a9cb95ddbaf0e1f30c07c1738aca20e1c22ecc80a8aef6d48435f91f4b53af1ca98779090673e1b88c469eafae6e95a3bd5473c9595b9110714440065b8d2382b6cf93276d26838103a5334df73bcafb3d720b0bd3e29432692f9ecfdb8a22ef4d37c6177fa74a96ce2717767a4e34ec2e7d1fd9949bd3b0187868436f6e5b594d02d6060a39e0e04a701ee3073a9471a4434dc708507fb212ca676190566db5d9a1b029362710a995685f0a93aae9b2e3bf15e9ca2a7eb5b4464cc3c30f5b8ab2277ce0f0bc8ba2b4e17b4e8f878a05d70c28334e2a60199c329e83fde14af43d51c3bc8d0d6992741b73e8a6bc21c85625fd332d2b852eede0d74f38a8396400f6d647a57aa5d29fc8ced885b952a30f760de4126680e4e79ecefa8bf5cba26b1ac8dc2328bfa94cbf0c1e04bd8bd0a7c0e5f4b971dd97497bea24e894a90017970ec86828610d5eb7dd3774f106bf21cb2f4c8ff3567965b8b81aeac2440f8a5e5cf5c99f972929ae50d8b006568c11716c9ea534b10e22938fa7035c45fe6780c59d36d02d4027a51ba3735917fb3e97d8fd064becbfdc30a32a9e6add3e7adaa1bee6fe327f5b3bea26136030ddd7ac81ac2d8f26e3287820b90f3631021bbae9cb8663228928f8bd10a7e3a03f61a6a764566ddd1aa882f03730c95c8170431a9d20b5b0264810cd4eeccf8916b8a9ceb7691a3877c7662477172fc0c8e07f91e21753422eeea4242a1308704163862fecde365d4a078f5f71ef2d66e04904e13a8384042adb83c00eba4a98b43d70ee6e9f0a684056141653ceb83cc8c580b92fe8958ba24cde3566dffa102d1a9be2cced7eb96368ba468e3bbd14af8ab6a9e93c70e76281262b43e40ba4073d57de05a3c0731b5e22ce9b2b6023ff138a7b721287ed3d54c0433d1698000352db491ff8c8e09f8567ac773197dbcdcbd2bf46248acdf0650f7e9a6568651ab185e674a17b309baffa0ac5b1354f7d149ec301537725f50b40ef9a074423607f3b937e6759143a02913b2d7e033ded4238acb29d374d288bc665f871c53b01c5bd0b23eea067c2f0af725ea55a8463b869d304df7ac4cedf2671b82101e2a487f6685c0c9508f6743b68e8396f932268df671fa869d9122c82ddeff879323eed71372f65e39ea05c7a06bdef053ed506002d7c7b089ddc5ccafcbc10ef8092eec2b4e75a6dc47983232d6d0f195f1023f0e388479251582b3792cc478d612325989abb50bc54ce015021b738afae0f210634022d6369bfda6b41d359b630cabff87f34e4ef1f36b93fe42bd2c098189a61a4b14759d53f56639f20683757fc99fa1e4e3a7a0332", 0x1000, 0x4}, {&(0x7f0000000480)="f0790e7aaf1439a45a4affd2bbcc07c160ef803c6835058547899ae8f2f74d428ae045d8ca4e949a3bdf1e35af8695fe7c851b36b3fd89f629582ef103624f04b5db667cf1212020c3fddbd685bfd5375b0f39160094055eec47ffdf81ee5303fe5e71c1efbf2e1f31ef324b10ccdaaef5c91044bd8c8684", 0x78, 0xfffffffffffffffe}, {&(0x7f0000000500)="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", 0xfb, 0x9}, {&(0x7f0000000600)="76c2e1f5daae0f48f9142bd3f456c0608d2cfdf84cd8fa9623896d4d10dcd46052d997115a825f8bb4396315cf75", 0x2e, 0x40}], 0x1000, &(0x7f0000002900)=ANY=[@ANYBLOB="6e6f646f74732c73792c7569643dbc7c5a4181d8482f6ebeebf4b44cbac6ce6a9ed72e0e5afb19edf8abbf2310ebf60adbab2a678242acff9e9e5efdc46d930000", @ANYRESHEX=r3, @ANYBLOB=',dots,sys_immutable,dots,debug,dots,nodots,\x00'])

[  989.343819] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  989.343819]    program syz-executor5 not setting count and/or reply_len properly
[  989.398124] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  989.398124]    program syz-executor2 not setting count and/or reply_len properly
03:43:36 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0xa0100, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

03:43:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x9, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80700, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:36 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100))
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x2004, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000080)={0x9, 0x5, 0x100, 0xffffffffffffffe0, 0x1c, 0x2})

03:43:36 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x29, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:36 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100"}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940), &(0x7f0000002900))
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'fo\x00'}, 0x2c)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x0, 0x3, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1})
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
read(0xffffffffffffffff, &(0x7f0000000040)=""/92, 0x5c)
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
epoll_create1(0x0)

03:43:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a779464419895c02d300000000000000000000000000005372ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000100000000000000000000000000000000000000000000000f5ffffffffffffff0000000000000000000000000000000000000000000000000000000000"], 0x120)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x90800, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x80000000, @mcast1, 0x1}, @in6={0xa, 0x4e20, 0x1ff, @local, 0xffff}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x77, 0x6, 0x20, 0xa9a9, r3}, 0x10)

03:43:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x400)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0xda, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/218}, &(0x7f0000000240)=0x78)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

[  990.128501] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  990.128501]    program syz-executor5 not setting count and/or reply_len properly
[  990.200237] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  990.200237]    program syz-executor5 not setting count and/or reply_len properly
03:43:36 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup2(r1, r2)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x20, 0x4, 0x20, 0x5})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)

03:43:36 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x4, 0x8, 0x1, 0x1000000000000004, 0x4, 0x7, 0x3, 0x20, <r1=>0x0}, &(0x7f0000000080)=0x20)
r2 = dup3(r0, r0, 0x80000)
r3 = getuid()
ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002880)={<r4=>0x0}, &(0x7f00000028c0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002900)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000002a00)=0xe8)
getgroups(0x1, &(0x7f0000002a40)=[<r6=>0xee01])
sendmsg$netlink(r2, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002b40)=ANY=[@ANYBLOB="fc13008df140d508362580dfd8eaf377000041006f9e2dbd7000fedbcb250c005e0008008000", @ANYRES32=r3, @ANYBLOB="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"], 0x13fc}, {&(0x7f0000001580)={0x1298, 0x30, 0x811, 0x70bd2c, 0x25dfdbfb, "", [@generic="0aa2401bf7bfc5f47adb4ddc3541dd17292429f3015b7a39636d3a18963a762c06812b21d17b6bfe1a4c7fecb22c01a02536bb98b076ec5b9cfe2a8713b2968f54ca402afcb97c7478e6b3568dc25e8d46421cd2b466e58b", @typed={0xc, 0x87, @str='-vmnet0'}, @generic="72803ea50ea30e7ccc4196e8490b0cfd2295121b11bbb70a1bb6f0dcb18282d5e16e8adb62523bd6cb9142813331fecd38521c1d0c1d1c1d007dc5520debd5a97b7835d5fecfbe3de711185c84a602cf1b563a3edbe0a89f089f78d31cfb47225d08640c2b37721682afb10bacaaf825a87e61f20283a073db23d68f9140c9856adc4ae893c783fddc3e008d3a31bb6116b6a0", @nested={0x118c, 0x1, [@typed={0x4, 0x66}, @typed={0x4, 0x4c}, @generic="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", @generic="fa84874d77e00a39bd8fd9ff20a0698d22c0544f710871569c9b04137b45d9a4e69b95b1dc9228036503fa67ba6e957ccf04996994ec4084522734931c529ea7fb31db7b876ed3e5f8685db6950ab6602d95aeafefb340a5bfc3b44101bea478a65ae68317161355bb95f906c36dc66483f26c34e194114bb9a2c755ddbefef8c54eda4fe500bb4c530be64056e89e9c75614f712e271ba5f0006e1713c3786e32081990720d4d9af43e3b77737916a635344689e159", @generic="0790d69c7cd9ba992fb8d8cbcbe8d349ad714bd7c90468c5b1f704033ba3efb609cedeef00e2551b90c9fd1a2d5b83c59f00bf25c40732d5ee721b70218a1e824ff9098fbdc72bafad55c2df3acc145fdf602b695f535dd70b61a255e3718415e988681ec88834b27394", @generic="f9021d04cf2ec78f02c65e2db1371cc6577ab92bf63cb1518f3949ac3d2929812ad5719afb4eed3f0a1ea84fc09e7c6420821ab364365d62e22d06b60cb89944240313b180c41d6d0c9cf945ded30b4690079da8ce0c3ced8f14ac500a"]}, @typed={0x4, 0x30}]}, 0x1298}], 0x2, &(0x7f0000002a80)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x50, 0x4000000}, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x8}, &(0x7f0000000140)=0x8)
socket$inet(0x2, 0x0, 0xff)
r7 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r7)

03:43:36 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x6)

[  990.389782] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  990.389782]    program syz-executor5 not setting count and/or reply_len properly
03:43:36 executing program 5:
r0 = gettid()
setpriority(0x3, r0, 0x3)
r1 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
r2 = dup2(r1, r1)
connect$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x1f, {0x7cc, 0x7fffffff, 0x0, 0x5, 0x8, 0x5}, 0xe4ad, 0xc749}, 0xe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
r3 = open(&(0x7f00000001c0)='./file0\x00', 0xc000, 0x0)
r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x200000, 0x0)
write$P9_RFLUSH(r3, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x800)
write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000000002d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000150000000000000400000000074c9d748d98c3af0000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x120)
gettid()
ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000240)={0x6, 0x0, 0x4, 0x2, 0x8})

[  990.487645] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  990.487645]    program syz-executor5 not setting count and/or reply_len properly
[  990.524967] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
03:43:36 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = gettid()
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000080)=r2)
write$binfmt_aout(r0, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x2d, 0x311, 0x1, 0x0, 0x9e}, "", [[]]}, 0x120)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x16c, 0x4)

[  990.524967]    program syz-executor5 not setting count and/or reply_len properly
[  990.546072] kasan: CONFIG_KASAN_INLINE enabled
[  990.552041] print_req_error: I/O error, dev loop0, sector 512
[  990.552353] kasan: GPF could be caused by NULL-ptr deref or user memory access
03:43:36 executing program 5:
syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1d8)

[  990.593138] sg_write: data in/out 9/246 bytes for SCSI command 0x0-- guessing data in;
[  990.593138]    program syz-executor5 not setting count and/or reply_len properly
03:43:36 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/userio\x00', 0x10000, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00')
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18)

[  990.647432] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  990.653696] CPU: 0 PID: 16536 Comm: syz-executor3 Not tainted 4.19.0-rc4+ #28
[  990.660973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  990.670356] RIP: 0010:loop_validate_file+0x247/0x470
[  990.675482] Code: 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 2e 02 00 00 4d 8b a4 24 f0 00 00 00 49 8d bc 24 b8 01 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 03 02 00 00 4d 8b a4 24 b8 01 00 00 4c 89 e0 48
[  990.687468] kobject: 'loop0' (000000003516233e): kobject_uevent_env
[  990.694384] RSP: 0018:ffff8800624b78f8 EFLAGS: 00010202
[  990.694422] RAX: 0000000000000037 RBX: dffffc0000000000 RCX: ffffc900050e5000
[  990.694432] RDX: 00000000000000ba RSI: ffffffff844d7ba7 RDI: 00000000000001b8
[  990.694463] RBP: ffff8800624b7918 R08: ffff88018e180300 R09: ffffed003b5c4732
[  990.694473] R10: ffffed003b5c4732 R11: ffff8801dae23993 R12: 0000000000000000
[  990.694488] R13: ffff8801bb139640 R14: 0000000000000002 R15: ffff8801bb139640
[  990.700985] kobject: 'loop0' (000000003516233e): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  990.706243] FS:  00007f23c8971700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000
[  990.706254] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  990.706263] CR2: 0000000000625208 CR3: 00000001918db000 CR4: 00000000001406f0
[  990.706276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  990.706285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  990.706295] Call Trace:
[  990.790593]  lo_ioctl+0x55c/0x1d80
[  990.794146]  ? avc_has_extended_perms+0xab2/0x15a0
[  990.799095]  ? lo_rw_aio_complete+0x470/0x470
[  990.803599]  blkdev_ioctl+0x9ac/0x2010
[  990.807496]  ? blkpg_ioctl+0xc10/0xc10
[  990.811409]  ? avc_ss_reset+0x190/0x190
[  990.815423]  ? rcu_read_unlock_special.part.39+0x11f0/0x11f0
[  990.821227]  ? kasan_check_read+0x11/0x20
[  990.825406]  ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160
[  990.830708]  ? rcu_bh_qs+0xc0/0xc0
[  990.834271]  ? ___might_sleep+0x1ed/0x300
[  990.838458]  ? arch_local_save_flags+0x40/0x40
[  990.843044]  ? kasan_check_write+0x14/0x20
[  990.847303]  block_ioctl+0xee/0x130
[  990.850948]  ? blkdev_fallocate+0x400/0x400
[  990.855278]  do_vfs_ioctl+0x1de/0x1720
[  990.859181]  ? ioctl_preallocate+0x300/0x300
[  990.863617]  ? selinux_file_mprotect+0x620/0x620
[  990.868382]  ? rcu_read_lock_sched_held+0x108/0x120
[  990.873428]  ? __x64_sys_futex+0x47f/0x6a0
[  990.877696]  ? do_syscall_64+0x9a/0x820
[  990.881685]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  990.887241]  ? security_file_ioctl+0x94/0xc0
[  990.891662]  ksys_ioctl+0xa9/0xd0
[  990.895126]  __x64_sys_ioctl+0x73/0xb0
[  990.899041]  do_syscall_64+0x1b9/0x820
[  990.902935]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  990.908305]  ? syscall_return_slowpath+0x5e0/0x5e0
[  990.913241]  ? trace_hardirqs_on_caller+0x310/0x310
[  990.918261]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[  990.923295]  ? recalc_sigpending_tsk+0x180/0x180
[  990.928054]  ? kasan_check_write+0x14/0x20
[  990.932297]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  990.937180]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  990.942374] RIP: 0033:0x457679
[  990.945592] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  990.964495] RSP: 002b:00007f23c8970c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  990.972206] RAX: ffffffffffffffda RBX: 00007f23c89716d4 RCX: 0000000000457679
[  990.979479] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000003
[  990.986752] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[  990.994020] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[  991.001294] R13: 00000000004d0570 R14: 00000000004c059f R15: 0000000000000000
[  991.008573] Modules linked in:
[  991.032936] kobject: 'loop5' (00000000af9bdea2): kobject_uevent_env
[  991.041695] kobject: 'loop5' (00000000af9bdea2): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  991.090419] kobject: 'loop0' (000000003516233e): kobject_uevent_env
[  991.096955] kobject: 'loop0' (000000003516233e): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  991.127365] ---[ end trace c8b177d33836ac0e ]---
[  991.132205] RIP: 0010:loop_validate_file+0x247/0x470
[  991.138293] Code: 00 00 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 2e 02 00 00 4d 8b a4 24 f0 00 00 00 49 8d bc 24 b8 01 00 00 48 89 f8 48 c1 e8 03 <80> 3c 18 00 0f 85 03 02 00 00 4d 8b a4 24 b8 01 00 00 4c 89 e0 48
[  991.159409] RSP: 0018:ffff8800624b78f8 EFLAGS: 00010202
[  991.165504] kobject: 'loop2' (000000004fa62260): kobject_uevent_env
[  991.171957] kobject: 'loop2' (000000004fa62260): fill_kobj_path: path = '/devices/virtual/block/loop2'
03:43:37 executing program 4:
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback}], 0x10)
connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x100000000009)
accept(r0, &(0x7f0000000040)=ANY=[], &(0x7f0000123000))
listen(r0, 0x0)
sendto$inet(r0, &(0x7f00000000c0)="cf", 0x22, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)

03:43:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x200)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="06000300020005004ad2"], &(0x7f00000000c0)=0xe)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={r3, 0x6}, &(0x7f0000000140)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000002d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8122eb55fe987cb0000000000000000000000000000000000000000000000000000000000000000000000000000000069528a9788be6dba8f03b0b56ba6bd2ab1da0ea7800e9e3065da4c66743c7ec5786e18f1e72e3dde4c0fc3fedab010379ef502cf56584e589f2ef241876647c70dfb634039dbf0fa24b4aed4de0e4cbe93a97dfa2a3d2eabed6f22091844bff9029a53ba041aa96c934fe70998074b9e0e4a4d767e5c9e0c231ed89b22161e3e45647c5d302a8f590002bbd00eff84612ba67c808bf048d6a45f6f70682da1cd7ba6a89e4e7ba9e8efae483a701c12aef6ebf9c42dec6d5b8d9a2fa7686721e448ddcdab5352b58f918165e0d64a639c3e100040ca555b7044c91d36d460cb4a847a49adf5c18b312939f5d929132506f9ad29fb1ac99ee34ae0"], 0x120)

03:43:37 executing program 2:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:37 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x20})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0)
r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x9)
write$binfmt_aout(r0, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x2d}, "", [[]]}, 0x120)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)=',*\x00')

[  991.188320] RAX: 0000000000000037 RBX: dffffc0000000000 RCX: ffffc900050e5000
[  991.228442] kobject: 'loop5' (00000000af9bdea2): kobject_uevent_env
[  991.239954] kobject: 'loop0' (000000003516233e): kobject_uevent_env
[  991.241963] kobject: 'loop5' (00000000af9bdea2): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  991.250732] kobject: 'loop0' (000000003516233e): fill_kobj_path: path = '/devices/virtual/block/loop0'
[  991.300185] kobject: 'loop5' (00000000af9bdea2): kobject_uevent_env
[  991.303989] RDX: 00000000000000ba RSI: ffffffff844d7ba7 RDI: 00000000000001b8
[  991.306805] kobject: 'loop5' (00000000af9bdea2): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  991.315501] RBP: ffff8800624b7918 R08: ffff88018e180300 R09: ffffed003b5c4732
03:43:37 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x0, "7665746831000000000000001100", 0x4}, 0x18)
r1 = memfd_create(&(0x7f0000002b00)='/dev/loop#\x00', 0x0)
ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000200))
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806)
prlimit64(0x0, 0xf, &(0x7f0000002940)={0x3}, &(0x7f0000002900))
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000029c0), &(0x7f0000000100)=0x2)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000028c0))
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c)
sendfile(r0, r0, &(0x7f0000000000), 0x2000005)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
gettid()
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000002980))
read(r2, &(0x7f0000000040)=""/92, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000002a40), &(0x7f0000002a80)=0x4)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
close(r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000380)={0x2, 0x2, 0x1f, 0x2, &(0x7f0000000180)=[{}, {}]})
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = epoll_create1(0x0)
flock(r4, 0x1)

03:43:37 executing program 0:
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FICLONE(r0, 0x40049409, r0)
r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x35fdc4dc, 0x100)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x8, &(0x7f0000000140)=[{}, {}, {}, {<r2=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000280)={r2, 0x2})
openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x200, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff}, 0x13f}}, 0xfffffe78)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)

[  991.349153] R10: ffffed003b5c4732 R11: ffff8801dae23993 R12: 0000000000000000
[  991.370866] R13: ffff8801bb139640 R14: 0000000000000002 R15: ffff8801bb139640
[  991.380365] FS:  00007f23c8971700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000
[  991.391388] kobject: 'loop1' (000000006c67c2e3): kobject_uevent_env
[  991.398169] kobject: 'loop1' (000000006c67c2e3): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  991.398985] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  991.420129] CR2: 000000000070c640 CR3: 00000001918db000 CR4: 00000000001406e0
[  991.439049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  991.446511] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  991.453845] Kernel panic - not syncing: Fatal exception
[  991.460329] Kernel Offset: disabled
[  991.463961] Rebooting in 86400 seconds..