1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e21, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 410.762528] program syz-executor2 is using a deprecated SCSI ioctl, please convert it to SG_IO 23:29:05 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) r1 = gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000), 0x100000000000033c, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x2eb, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000000c0)="1e") madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:06 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba9013", 0xc2}], 0x1}, 0x0) 23:29:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x4, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x420000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) r1 = gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000), 0x100000000000033c, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x2eb, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) r1 = gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000), 0x100000000000033c, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x2eb, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e21, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 411.347706] sg_write: 26 callbacks suppressed [ 411.347732] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 411.347732] program syz-executor1 not setting count and/or reply_len properly 23:29:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x440, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000080)=""/83, &(0x7f0000000140)=0x53) 23:29:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) r1 = gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000), 0x100000000000033c, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x2eb, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 411.491604] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 411.491604] program syz-executor1 not setting count and/or reply_len properly [ 411.516983] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 411.516983] program syz-executor2 not setting count and/or reply_len properly 23:29:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) r1 = gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000), 0x100000000000033c, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x2eb, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 411.578709] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 411.578709] program syz-executor2 not setting count and/or reply_len properly 23:29:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x4e21, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:06 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) socketpair(0x19, 0x3, 0x3f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}}, 0x7, 0x9}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0x7f, 0x1, 0x633, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x80000001, 0x20}, 0xc) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x800, 0x0) [ 411.740561] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 411.740561] program syz-executor1 not setting count and/or reply_len properly [ 411.774281] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 411.774281] program syz-executor3 not setting count and/or reply_len properly 23:29:07 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba9013", 0xc2}], 0x1}, 0x0) 23:29:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) r1 = gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000), 0x100000000000033c, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x2eb, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xe2}, {0xa, 0x4e21, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x1b2, 0x0, 0x0, 0x0, 0x38}}, 0x40) [ 412.232227] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 412.232227] program syz-executor2 not setting count and/or reply_len properly [ 412.281997] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 412.281997] program syz-executor1 not setting count and/or reply_len properly 23:29:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) r1 = gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000), 0x100000000000033c, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x2eb, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x200) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 412.324255] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 412.324255] program syz-executor3 not setting count and/or reply_len properly 23:29:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair(0x7, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) open(&(0x7f0000000140)='./file0\x00', 0x200000, 0xc4) recvfrom$packet(r1, &(0x7f0000000080)=""/180, 0xb4, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:07 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002e40)=[{0x0, 0x0, &(0x7f00000013c0), 0x348, &(0x7f0000002d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) read(r3, &(0x7f00000000c0)=""/159, 0x9f) chroot(&(0x7f0000000000)='./file0\x00') write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 412.515625] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 412.515625] program syz-executor2 not setting count and/or reply_len properly 23:29:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) socketpair(0x19, 0x3, 0x3f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}}, 0x7, 0x9}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240)={0x7f, 0x1, 0x633, 0x1}, 0x8) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) r1 = gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_vm_writev(r1, &(0x7f0000000000), 0x100000000000033c, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x2eb, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:08 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd3", 0x123}], 0x1}, 0x0) 23:29:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x60100) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x109000, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x200, 0x40000) 23:29:08 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002e40)=[{0x0, 0x0, &(0x7f00000013c0), 0x348, &(0x7f0000002d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) read(r3, &(0x7f00000000c0)=""/159, 0x9f) chroot(&(0x7f0000000000)='./file0\x00') write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0xffffffff, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002e40)=[{0x0, 0x0, &(0x7f00000013c0), 0x348, &(0x7f0000002d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) read(r3, &(0x7f00000000c0)=""/159, 0x9f) chroot(&(0x7f0000000000)='./file0\x00') write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0xffffffff, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x2, 0x0, 0xffffffb5, 0x0, 0x8001, 0x0, 0x38, 0x0, 0x0, 0x7fff}}, 0x40) 23:29:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) socketpair(0x19, 0x3, 0x3f, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}}, 0x7, 0x9}, &(0x7f0000000080)=0x90) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:08 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0xffffffff, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:08 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x123}], 0x1}, 0x0) 23:29:08 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7c}}, 0x40) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x2, 0x4) 23:29:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002e40)=[{0x0, 0x0, &(0x7f00000013c0), 0x348, &(0x7f0000002d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) read(r3, &(0x7f00000000c0)=""/159, 0x9f) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:08 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:29:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002e40)=[{0x0, 0x0, &(0x7f00000013c0), 0x348, &(0x7f0000002d40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) socketpair(0x19, 0x3, 0x3f, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:09 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:09 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:09 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x123}], 0x1}, 0x0) 23:29:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000100)) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x4, 0xffffffffffffffff}, [{0x3, 0xfffffffffffffff8, 0x9, 0x7, 0xb, 0xffffffff, 0x20, 0x7}]}, 0x78) 23:29:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") accept$alg(r1, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:09 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) 23:29:09 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f5, 0x31b, 0x0, 0x4, 0x38, 0x0, 0x0, 0x100000000}, [], "47525c0336b397d1fc1ad27671d670f16ffe17064b031a7aa43be0133081f1741aae75c82e3868a035fa996200a0f8da3388ba79434ef0e1c812582b7ac5"}, 0xa) 23:29:10 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:10 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x81, 0x80001) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xd6, "3ccf5621659b2bcfbffc50a5bf130127ce7bd800f7e614812ac9c46988a28d856ab1da793e9f311a77efbf7744111de356b6a47f70ae8c8200acb14ccde0a44a1adc0d3d64d13e40f0ca70068af1e134c9e5112cc265d3e3c10f90d8d69543c92d320032e670ff5b2eb2722d873d916997def2ac509fb36ee4b1afbb9ea45b619eb0b8228953011d19559321c7df6c92fda4832080f59f3064ff01ba811e5c1e6b181058718330dfdb59668f2a9b900d5a60103dad3e635a58e36571264632271c13db545249ebcf5cc4edc3fa23e8e70ba67dbec0ba"}, &(0x7f0000000180)=0xfa) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) 23:29:10 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:10 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:10 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x154}], 0x1}, 0x0) 23:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) socket$inet6(0xa, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:10 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x800000000000000, 0xfffe) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) 23:29:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x3) 23:29:10 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) socket$inet6(0xa, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:10 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)) 23:29:10 executing program 5: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:11 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:11 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x121200, 0x40) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0xed, 0x80, 0x4, 0x10001, 0xffffffffffffffff, 0x3}) accept$unix(r0, &(0x7f0000000140), &(0x7f0000000200)=0x6e) r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0xfffffffffffffffc, 0x60004) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x488000, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000000c0)=r3) 23:29:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) socketpair(0x19, 0x3, 0x3f, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}}, 0x7, 0x9}, &(0x7f0000000080)=0x90) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:11 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) socket$inet6(0xa, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:11 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x154}], 0x1}, 0x0) 23:29:11 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:11 executing program 5: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:11 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x0, 0x4000) fsetxattr(r0, &(0x7f0000000180)=@random={'os2.', '/dev/sg#\x00'}, &(0x7f00000001c0)='md5sumeth0F\\mime_typeGPL\x00', 0x19, 0x2) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c465600e6ba17812013eddb0c8ae20000000000000000000000000000000040000000000000000000000000000000000000000000380045a5000009000000"], 0x40) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb0df9fd, 0x80) recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000100)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/43, 0x2b}], 0x2}, 0x1) 23:29:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) socketpair(0x19, 0x3, 0x3f, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}}, 0x7, 0x9}, &(0x7f0000000080)=0x90) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 416.689359] sg_write: 33 callbacks suppressed [ 416.689391] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 416.689391] program syz-executor3 not setting count and/or reply_len properly 23:29:11 executing program 5: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:11 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:11 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:11 executing program 0: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 23:29:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xc06, 0x10000) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:11 executing program 5: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:11 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) gettid() setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 417.075831] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 417.075831] program syz-executor3 not setting count and/or reply_len properly 23:29:12 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd395defc5c67a8adce29d95a66cd4fd7822a6dd82d0615e2fc77d2cc07bb96c20c7289e2736e79aba1104e899725365e60ef", 0x154}], 0x1}, 0x0) 23:29:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3c9, 0x0, 0x0, 0x38}, [{0x70000000, 0x0, 0xc50, 0x1, 0x6, 0x1, 0x6567, 0x4}, {0x60000000, 0x100000001, 0xfffffffd, 0x400, 0xfffffffeffffffff, 0x401, 0x9, 0x9}]}, 0xb0) 23:29:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:12 executing program 5: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:12 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) socketpair(0x19, 0x3, 0x3f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}}, 0x7, 0x9}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0x7f, 0x1, 0x633, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x80000001, 0x20}, 0xc) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x2) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x300000}, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 417.575470] sg_write: data in/out 50/134 bytes for SCSI command 0x0-- guessing data in; [ 417.575470] program syz-executor2 not setting count and/or reply_len properly [ 417.622670] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 417.622670] program syz-executor3 not setting count and/or reply_len properly 23:29:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:12 executing program 5: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) 23:29:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xe2}, {0xa, 0x4e21, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x5, 0x30}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0xe0, 0x10}, 0xc) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r2, &(0x7f0000001680)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "0468ba965a711ba9096783a702002826f3", [[], [], [], [], [], [], [], [], [], []]}, 0xa51) 23:29:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:12 executing program 6 (fault-call:2 fault-nth:0): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 417.798789] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 417.798789] program syz-executor1 not setting count and/or reply_len properly [ 417.855194] sg_write: data in/out 50/2599 bytes for SCSI command 0x0-- guessing data in; [ 417.855194] program syz-executor2 not setting count and/or reply_len properly 23:29:12 executing program 5: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) [ 417.926562] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 417.926562] program syz-executor3 not setting count and/or reply_len properly 23:29:13 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x16c}], 0x1}, 0x0) 23:29:13 executing program 1 (fault-call:2 fault-nth:0): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:13 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x400) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) ioctl(r0, 0xfb, &(0x7f0000000040)="972568e2ae0f987d2da230335b7a59f25256fd648db20a90e89073227bd15e0c6bd8b2fed481e45d9716159859c2e52eb7b1613a00d7edbe7bb842660c2918f1df1090060246519b42eff71165c82ca988334c40fb4add2666a3444365fd4bb95b0cd223ea27f92fe231cc5770601a2fc61727d0cdbd5a842a962be0b8eed5d2f1f3ece7a737217fd54d588eeefa3239dd5f025bfc19946ccfeb398ca66bad1d0d1f4eb40d9a874f5627b60e") setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000003c0)={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, r1}, 0xc) mkdir(&(0x7f0000000240)='./file0\x00', 0x21) socket$can_bcm(0x1d, 0x2, 0x2) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) 23:29:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x1946f5e9f4ffc3df, 0x6) 23:29:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:13 executing program 4 (fault-call:2 fault-nth:0): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 418.472383] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 418.472383] program syz-executor5 not setting count and/or reply_len properly [ 418.473683] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 418.473683] program syz-executor2 not setting count and/or reply_len properly [ 418.537343] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 418.537343] program syz-executor3 not setting count and/or reply_len properly 23:29:13 executing program 4: mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:13 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc)=0x3, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x40) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x100000001, 0x0, 0x8}, &(0x7f0000000080)=0x14) fcntl$getflags(r0, 0x40a) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x1f}, 0x8) 23:29:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="d179f2060000000000000008a230e7a657f9cc6e", 0x14) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:13 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x20, 0xc, [0x3, 0x1, 0x7]}) 23:29:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffe, 0x1000, 0x3ff, @buffer={0x0, 0xd8, &(0x7f0000000100)=""/216}, &(0x7f0000000200)="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", &(0x7f0000001200)=""/220, 0x3, 0x4, 0x0, &(0x7f0000001300)}) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c0056000000000000000000e8000000307fc10c34ba21000000000000000000000000000040000000e900000000000000000000000000ebffffff00380000"], 0x40) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x101000) 23:29:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:13 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x558, 0x118, 0x0, 0x118, 0x470, 0x470, 0x470, 0x4, &(0x7f0000000040), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:framebuf_device_t:s0\x00'}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}, 0x93188bd3b27e9c80}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5a8) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000640)=0x3) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:14 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd395defc5c67a8adce29d95a66cd4fd7822a6dd82d0615e2fc77d2cc07bb96c20c7289e2736e79aba1104e899725365e60ef347479f1f212f4e641bb626519f8c5ee906d436c58e1144c", 0x16c}], 0x1}, 0x0) 23:29:14 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:14 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000f46000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = socket$inet6(0xa, 0x80800, 0x1) r1 = semget(0x1, 0x2, 0x14a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getpeername$inet6(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000340)=0x1c) getgroups(0x5, &(0x7f0000000080)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00]) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000280)={{0x7ff, r2, r3, r4, r5, 0x40, 0x3f}, 0x7, 0x7, 0xe}) 23:29:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280)=0x800000000007, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = dup(r1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000200)={0x1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, @link_local}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) io_setup(0x8001, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000380)={'syz_tun\x00', @ifru_names='rose0\x00'}) io_destroy(r3) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x800) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ftruncate(r5, 0x80080) sendfile(r2, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) 23:29:14 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f00000005c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x40) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000600)=0x3) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000c29ffc)=0x4, 0xffffffffffffff2b) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) sendto$inet(r1, &(0x7f0000000640)="d83708545b53c64f2c8a07dece908b9baa473ac00672300e6732095278701465373dc056b11e837c525465675e132eb01427aa145d33988205af2e2cccbea4404b43c3ca210243d80838b23319ce6394", 0x50, 0x4000, &(0x7f00000006c0)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) sendmsg$rds(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/248, 0xf8}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/194, 0xc2}], 0x4, &(0x7f0000000500)=[@mask_fadd={0x58, 0x114, 0x8, {{0x5, 0xffff}, &(0x7f0000000480)=0x8000, &(0x7f00000004c0)=0x6, 0xfff, 0xfffffffffffffffa, 0x3, 0x1f, 0x1, 0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x8}}], 0x70, 0x10}, 0x44) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x7fff) 23:29:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:14 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000100), 0x4) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x5, 0x1) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 419.336897] FAULT_INJECTION: forcing a failure. [ 419.336897] name failslab, interval 1, probability 0, space 0, times 0 [ 419.348422] CPU: 1 PID: 21345 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 419.355366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.364740] Call Trace: [ 419.367376] dump_stack+0x185/0x1d0 [ 419.371055] should_fail+0x87b/0xab0 [ 419.374845] __should_failslab+0x278/0x2a0 [ 419.379134] should_failslab+0x29/0x70 [ 419.383058] __kmalloc+0xbe/0x350 [ 419.386564] ? _cond_resched+0x3c/0xd0 [ 419.390506] ? sg_build_indirect+0x110/0xc90 [ 419.394968] sg_build_indirect+0x110/0xc90 [ 419.399252] ? rcu_all_qs+0x32/0x1f0 [ 419.403009] sg_common_write+0x2260/0x3ad0 [ 419.407302] ? kmsan_set_origin_inline+0x6b/0x120 [ 419.412207] sg_write+0x14d9/0x15b0 [ 419.415903] ? kmsan_set_origin_inline+0x6b/0x120 [ 419.420802] ? kmsan_set_origin_inline+0x6b/0x120 [ 419.425694] ? __msan_poison_alloca+0x15c/0x1d0 [ 419.430428] ? vfs_write+0x467/0x8c0 23:29:14 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x60000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r1, 0x3f}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioprio_get$uid(0x3, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0x3, 0x7, 0x1, 0x3be800000000, 'syz0\x00', 0xfffffffffffffffd}) r4 = shmget$private(0x0, 0x1000, 0x120, &(0x7f0000f6b000/0x1000)=nil) shmctl$SHM_LOCK(r4, 0xb) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:14 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 419.434198] ? __vfs_write+0xc9/0x9f0 [ 419.438048] ? vfs_write+0x467/0x8c0 [ 419.441806] ? sg_read+0x3420/0x3420 [ 419.445561] ? sg_read+0x3420/0x3420 [ 419.449307] __vfs_write+0x1aa/0x9f0 [ 419.453092] vfs_write+0x467/0x8c0 [ 419.456704] __x64_sys_write+0x1bf/0x3e0 [ 419.460811] ? ksys_write+0x360/0x360 [ 419.464816] do_syscall_64+0x15b/0x230 [ 419.468753] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 419.473969] RIP: 0033:0x455ab9 [ 419.477178] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 419.484922] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 419.492303] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 419.499597] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 419.506998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 419.514292] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000000 23:29:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100), 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:14 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000752000/0x2000)=nil, 0x2000, 0x8) r0 = shmget$private(0x0, 0x4000, 0x180, &(0x7f0000f2c000/0x4000)=nil) shmat(r0, &(0x7f0000ec0000/0x1000)=nil, 0x0) eventfd2(0x10000, 0x0) munlockall() 23:29:14 executing program 5 (fault-call:1 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:14 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffe6ca0915, 0x800) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 419.836208] FAULT_INJECTION: forcing a failure. [ 419.836208] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 419.848474] CPU: 0 PID: 21374 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 419.856038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.865430] Call Trace: [ 419.868104] dump_stack+0x185/0x1d0 [ 419.871830] should_fail+0x87b/0xab0 [ 419.875604] __alloc_pages_nodemask+0x600/0x5cc0 [ 419.880436] ? kmsan_set_origin_inline+0x6b/0x120 [ 419.885353] ? __msan_poison_alloca+0x15c/0x1d0 [ 419.890087] ? __kmalloc+0x2d8/0x350 [ 419.893841] ? kmsan_set_origin_inline+0x6b/0x120 [ 419.898718] ? __msan_poison_alloca+0x15c/0x1d0 [ 419.903424] ? __kmalloc+0x10a/0x350 [ 419.907179] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 419.912668] ? cap_capable+0x222/0x350 [ 419.916604] alloc_pages_current+0x6b1/0x970 [ 419.921100] sg_build_indirect+0x4ee/0xc90 [ 419.925395] sg_common_write+0x2260/0x3ad0 [ 419.929689] ? kmsan_set_origin_inline+0x6b/0x120 [ 419.934603] sg_write+0x14d9/0x15b0 [ 419.938299] ? kmsan_set_origin_inline+0x6b/0x120 [ 419.943194] ? kmsan_set_origin_inline+0x6b/0x120 [ 419.948087] ? __msan_poison_alloca+0x15c/0x1d0 [ 419.952813] ? vfs_write+0x467/0x8c0 [ 419.956584] ? __vfs_write+0xc9/0x9f0 [ 419.960452] ? vfs_write+0x467/0x8c0 [ 419.964211] ? sg_read+0x3420/0x3420 [ 419.967964] ? sg_read+0x3420/0x3420 [ 419.971738] __vfs_write+0x1aa/0x9f0 [ 419.975529] vfs_write+0x467/0x8c0 [ 419.979136] __x64_sys_write+0x1bf/0x3e0 [ 419.983230] ? ksys_write+0x360/0x360 [ 419.987063] do_syscall_64+0x15b/0x230 [ 419.991006] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 419.996315] RIP: 0033:0x455ab9 [ 419.999521] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.007264] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 420.014570] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 420.021866] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 420.029159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 23:29:14 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 420.036456] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000001 23:29:15 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd395defc5c67a8adce29d95a66cd4fd7822a6dd82d0615e2fc77d2cc07bb96c20c7289e2736e79aba1104e899725365e60ef347479f1f212f4e641bb626519f8c5ee906d436c58e1144c", 0x16c}], 0x1}, 0x0) 23:29:15 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000000000000000000000000004000000000000000000000000002000000000000000038000000000000000000"], 0x40) 23:29:15 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="12c8781a01bacdf209cdcff038f3efa5f095e178f7240d03f83a3c4b702adc26d1dbc98a6ba1434954fc8fef71dbbbe547d3f35099b85d1c05e2bef41c21099d14288ccc52f0e89ad399ddf5eb8a8c79760f8204e4bb83f53ec4c0af75079dab8321a006302e8109e9dada379c861a4643381aa1c56f7c8c3191dd396f324ee4d79300f76d08f0305f9504b1b954482317886173002b831521e90eeb13862738569da1a719b2fc62f150eb0ce489a149f8b9ee76938ba8e586022a4f44d2d044bc4566de1d0cbca439d57e064748967c6660470d77", &(0x7f0000000140)="b8de7da42f3f7efbe91a3816595ac647dd8fa4b200e448159370a1b6fb13107e0f2b92a5b0e672"}, 0x20) 23:29:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:15 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000, 0x0) r1 = dup(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x4}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100), 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:15 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0xb3, 0x8204, 0xffffffff, 0x8, r1}, &(0x7f0000000100)=0x10) 23:29:15 executing program 5 (fault-call:1 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 420.239121] FAULT_INJECTION: forcing a failure. [ 420.239121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.251073] CPU: 0 PID: 21394 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 420.258007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.267358] Call Trace: [ 420.269957] dump_stack+0x185/0x1d0 [ 420.273599] should_fail+0x87b/0xab0 [ 420.277331] __alloc_pages_nodemask+0x600/0x5cc0 [ 420.282112] ? kernel_poison_pages+0x1a0/0x360 [ 420.286702] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 420.292154] ? get_page_from_freelist+0xacd1/0xb7b0 [ 420.297205] ? kernel_text_address+0x34d/0x3a0 [ 420.301793] ? __kernel_text_address+0x34/0xe0 [ 420.306448] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 420.311913] kmsan_internal_alloc_meta_for_pages+0x8d/0x710 [ 420.317621] ? is_bpf_text_address+0xb4/0x4b0 [ 420.322131] ? __kernel_text_address+0x34/0xe0 [ 420.326713] ? kmsan_set_origin_inline+0x6b/0x120 [ 420.331560] kmsan_alloc_page+0x87/0xe0 23:29:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 420.335537] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 420.340305] ? kmsan_set_origin_inline+0x6b/0x120 [ 420.345156] ? __msan_poison_alloca+0x15c/0x1d0 [ 420.349824] ? kmsan_set_origin_inline+0x6b/0x120 [ 420.354668] ? __msan_poison_alloca+0x15c/0x1d0 [ 420.359357] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 420.364738] ? cap_capable+0x222/0x350 [ 420.368631] alloc_pages_current+0x6b1/0x970 [ 420.373043] sg_build_indirect+0x4ee/0xc90 [ 420.377292] sg_common_write+0x2260/0x3ad0 [ 420.381552] ? kmsan_set_origin_inline+0x6b/0x120 [ 420.386407] sg_write+0x14d9/0x15b0 23:29:15 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000c0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) munlock(&(0x7f0000546000/0x4000)=nil, 0x4000) mremap(&(0x7f00005db000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 420.390045] ? kmsan_set_origin_inline+0x6b/0x120 [ 420.394896] ? kmsan_set_origin_inline+0x6b/0x120 [ 420.399744] ? __msan_poison_alloca+0x15c/0x1d0 [ 420.404419] ? vfs_write+0x467/0x8c0 [ 420.408179] ? __vfs_write+0xc9/0x9f0 [ 420.411994] ? vfs_write+0x467/0x8c0 [ 420.415708] ? sg_read+0x3420/0x3420 [ 420.419429] ? sg_read+0x3420/0x3420 [ 420.423144] __vfs_write+0x1aa/0x9f0 [ 420.426872] vfs_write+0x467/0x8c0 [ 420.430429] __x64_sys_write+0x1bf/0x3e0 [ 420.434497] ? ksys_write+0x360/0x360 [ 420.438309] do_syscall_64+0x15b/0x230 [ 420.442307] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 420.447510] RIP: 0033:0x455ab9 [ 420.450695] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.458403] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 420.465680] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 420.472945] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 420.480218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 420.487487] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000002 23:29:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100), 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:15 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) recvmmsg(0xffffffffffffff9c, &(0x7f0000007c00)=[{{&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/168, 0xa8}, {&(0x7f0000001140)=""/9, 0x9}], 0x3}, 0x7fff}, {{&(0x7f00000011c0)=@ax25, 0x80, &(0x7f0000001800)=[{&(0x7f0000001240)=""/120, 0x78}, {&(0x7f00000012c0)=""/27, 0x1b}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/112, 0x70}, {&(0x7f0000001400)=""/227, 0xe3}, {&(0x7f0000001500)=""/202, 0xca}, {&(0x7f0000001600)=""/202, 0xca}, {&(0x7f0000001700)=""/218, 0xda}], 0x8, &(0x7f0000001880)=""/192, 0xc0, 0xffffffffffffffc0}, 0x5}, {{&(0x7f0000001940)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002c00)=[{&(0x7f00000019c0)=""/63, 0x3f}, {&(0x7f0000001a00)=""/123, 0x7b}, {&(0x7f0000001a80)=""/85, 0x55}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/104, 0x68}, {&(0x7f0000002b80)=""/90, 0x5a}], 0x6, &(0x7f0000002c80)=""/16, 0x10, 0x3f}, 0x1}, {{&(0x7f0000002cc0)=@ipx, 0x80, &(0x7f0000004000)=[{&(0x7f0000002d40)=""/176, 0xb0}, {&(0x7f0000002e00)}, {&(0x7f0000002e40)=""/224, 0xe0}, {&(0x7f0000002f40)=""/183, 0xb7}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x5, &(0x7f0000004080)=""/99, 0x63, 0x2d9}, 0x80000001}, {{&(0x7f0000004100)=@alg, 0x80, &(0x7f0000006640)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/131, 0x83}, {&(0x7f0000005240)=""/4096, 0x1000}, {&(0x7f0000006240)=""/229, 0xe5}, {&(0x7f0000006340)=""/238, 0xee}, {&(0x7f0000006440)=""/235, 0xeb}, {&(0x7f0000006540)=""/246, 0xf6}], 0x7, &(0x7f00000066c0)=""/50, 0x32, 0x5}, 0x7ff}, {{&(0x7f0000006700), 0x80, &(0x7f0000006940)=[{&(0x7f0000006780)=""/64, 0x40}, {&(0x7f00000067c0)=""/106, 0x6a}, {&(0x7f0000006840)=""/222, 0xde}], 0x3, &(0x7f0000006980)=""/173, 0xad}, 0x2}, {{0x0, 0x0, &(0x7f0000007ac0)=[{&(0x7f0000006a40)=""/90, 0x5a}, {&(0x7f0000006ac0)=""/4096, 0x1000}], 0x2, &(0x7f0000007b00)=""/195, 0xc3, 0x3}, 0x401}], 0x7, 0x2, &(0x7f0000007dc0)) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 23:29:15 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000ea7000/0x2000)=nil, 0x2000, 0x1000, 0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) 23:29:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:15 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc)=0xfffffffffffffffe, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x3000, 0x3, &(0x7f0000e84000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:16 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x178}], 0x1}, 0x0) 23:29:16 executing program 5 (fault-call:1 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 23:29:16 executing program 6: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x1800000, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80000, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)=0x1f) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) clock_settime(0x2, &(0x7f0000000000)={0x0, 0x989680}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:16 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x600) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), 0xffffffffffffff36) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="1cea9bf574acaf139608e3a64f80bbedef4c8ccf4f68e51f53672a9fd1d1be130972bbb8466abb7bc52456bc4b8cf41cc07c8b15caabf1456ddaf041cdaa82d1f0f48a68f276594bd5d7111e61f6fc7aa8219ec8e11c2d8642c7a8055cbcf86b95a1349694b350b78420bed8903f326d5906c37982ca21", 0x77, 0xfffffffffffffff8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000002c0)={'nat\x00', 0x0, 0x3, 0x68, [], 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)=""/104}, &(0x7f00000000c0)=0x78) keyctl$invalidate(0x15, r1) 23:29:16 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000e4c000/0x1000)=nil) r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x4, 0x2) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'syz_tun\x00', 0xfffffffffffffffe}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000180)=0xf2) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bpq0\x00', 0x1}, 0x18) 23:29:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x230000) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000f60000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) 23:29:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 421.191363] FAULT_INJECTION: forcing a failure. [ 421.191363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 421.203217] CPU: 1 PID: 21448 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 421.210143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.219496] Call Trace: [ 421.222090] dump_stack+0x185/0x1d0 [ 421.225723] should_fail+0x87b/0xab0 [ 421.229447] __alloc_pages_nodemask+0x600/0x5cc0 [ 421.234203] ? kernel_poison_pages+0x1a0/0x360 [ 421.238786] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 421.244266] ? get_page_from_freelist+0xacd1/0xb7b0 [ 421.249286] ? kernel_text_address+0x34d/0x3a0 [ 421.253894] ? __kernel_text_address+0x34/0xe0 [ 421.258496] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 421.263971] kmsan_internal_alloc_meta_for_pages+0x105/0x710 [ 421.269767] ? is_bpf_text_address+0xb4/0x4b0 [ 421.274342] ? __kernel_text_address+0x34/0xe0 [ 421.278930] ? kmsan_set_origin_inline+0x6b/0x120 [ 421.283779] kmsan_alloc_page+0x87/0xe0 23:29:16 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1000, 0x20000) mmap(&(0x7f0000ec5000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f000080b000/0x3000)=nil, 0x3000, 0xa) [ 421.287760] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 421.292528] ? kmsan_set_origin_inline+0x6b/0x120 [ 421.297371] ? __msan_poison_alloca+0x15c/0x1d0 [ 421.302082] ? kmsan_set_origin_inline+0x6b/0x120 [ 421.306936] ? __msan_poison_alloca+0x15c/0x1d0 [ 421.311633] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 421.317003] ? cap_capable+0x222/0x350 [ 421.320896] alloc_pages_current+0x6b1/0x970 [ 421.325312] sg_build_indirect+0x4ee/0xc90 [ 421.329559] sg_common_write+0x2260/0x3ad0 [ 421.333799] ? kmsan_set_origin_inline+0x6b/0x120 [ 421.338654] sg_write+0x14d9/0x15b0 [ 421.342294] ? kmsan_set_origin_inline+0x6b/0x120 [ 421.347136] ? kmsan_set_origin_inline+0x6b/0x120 [ 421.351981] ? __msan_poison_alloca+0x15c/0x1d0 [ 421.356654] ? vfs_write+0x467/0x8c0 [ 421.360372] ? __vfs_write+0xc9/0x9f0 [ 421.364168] ? vfs_write+0x467/0x8c0 [ 421.367883] ? sg_read+0x3420/0x3420 [ 421.371601] ? sg_read+0x3420/0x3420 [ 421.375315] __vfs_write+0x1aa/0x9f0 [ 421.379037] vfs_write+0x467/0x8c0 [ 421.382588] __x64_sys_write+0x1bf/0x3e0 [ 421.386657] ? ksys_write+0x360/0x360 23:29:16 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4002, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x8000, 0x0) 23:29:16 executing program 1: io_setup(0x8001, &(0x7f0000000000)=0x0) io_getevents(r0, 0x5, 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 421.390454] do_syscall_64+0x15b/0x230 [ 421.394352] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 421.401190] RIP: 0033:0x455ab9 [ 421.404372] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 421.412078] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 421.419376] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 421.426645] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 421.433912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 23:29:16 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:16 executing program 0: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0xb3, 0x8204, 0xffffffff, 0x8, r1}, &(0x7f0000000100)=0x10) [ 421.441178] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000003 23:29:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100), 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:16 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = memfd_create(&(0x7f00000002c0)='/dev/mixer\x00', 0x2) fcntl$getflags(r0, 0x408) r1 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {0x6}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xec2d}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe5c1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4400, 0x0) 23:29:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) [ 421.726605] sg_write: 20 callbacks suppressed [ 421.726631] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 421.726631] program syz-executor2 not setting count and/or reply_len properly 23:29:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:16 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x178}], 0x1}, 0x0) 23:29:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100), 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:16 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="2957e1311f16f477671070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @multicast1=0xe0000001}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) dup2(r1, r2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0xc) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) keyctl$session_to_parent(0x12) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0xae, 0x20000) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:16 executing program 5 (fault-call:1 fault-nth:4): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) set_tid_address(&(0x7f0000000000)) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x200, 0x300) 23:29:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:16 executing program 6: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x3, 0x401) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 422.043112] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 422.043112] program syz-executor2 not setting count and/or reply_len properly [ 422.058826] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 422.058826] program syz-executor3 not setting count and/or reply_len properly [ 422.082747] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 422.082747] program syz-executor5 not setting count and/or reply_len properly [ 422.116884] FAULT_INJECTION: forcing a failure. [ 422.116884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.128932] CPU: 1 PID: 21490 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 422.135882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.145253] Call Trace: [ 422.147886] dump_stack+0x185/0x1d0 [ 422.151556] should_fail+0x87b/0xab0 [ 422.155315] __alloc_pages_nodemask+0x600/0x5cc0 [ 422.160140] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.165068] ? __msan_poison_alloca+0x15c/0x1d0 [ 422.169793] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.174665] ? __msan_poison_alloca+0x15c/0x1d0 [ 422.179370] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 422.184781] ? cap_capable+0x222/0x350 [ 422.188712] alloc_pages_current+0x6b1/0x970 [ 422.193172] sg_build_indirect+0x4ee/0xc90 [ 422.197453] sg_common_write+0x2260/0x3ad0 [ 422.201761] sg_write+0x14d9/0x15b0 [ 422.205461] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.210360] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.215255] ? __msan_poison_alloca+0x15c/0x1d0 [ 422.220007] ? vfs_write+0x467/0x8c0 [ 422.223780] ? __vfs_write+0xc9/0x9f0 [ 422.227630] ? vfs_write+0x467/0x8c0 [ 422.231390] ? sg_read+0x3420/0x3420 [ 422.235143] ? sg_read+0x3420/0x3420 [ 422.238898] __vfs_write+0x1aa/0x9f0 [ 422.242681] vfs_write+0x467/0x8c0 [ 422.248112] __x64_sys_write+0x1bf/0x3e0 [ 422.252211] ? ksys_write+0x360/0x360 [ 422.256040] do_syscall_64+0x15b/0x230 [ 422.259970] entry_SYSCALL_64_after_hwframe+0x63/0xe7 23:29:17 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x163103, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0xfffffda8) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = getpgid(0x0) ioctl$void(r1, 0xc0045c78) setsockopt(r0, 0x9, 0x81, &(0x7f0000000240)="8af1b516f4fc37926cd22764849a2d8fdda062dc9017a06e9d4537c5f71783471cf92722a59edb7a9f9a06", 0x2b) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000280)=[0xffffffffffffff64, 0x4]) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) fcntl$lock(r1, 0x5, &(0x7f0000000180)={0x3, 0x2, 0xffff, 0x8426, r2}) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r4, 0x8949, &(0x7f00000001c0)={'veth0_to_team\x00', @ifru_mtu=0x8}) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) sched_rr_get_interval(r2, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000)=0x8, 0x4) 23:29:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100), 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 422.265180] RIP: 0033:0x455ab9 [ 422.268389] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.276135] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 422.283428] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 422.290721] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 422.298013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 422.305305] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000004 23:29:17 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x301040, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000c29ffc)=0x1, 0x4) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0xfffffffffffffe4f) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xdc, &(0x7f0000000480), &(0x7f00000003c0)=0x20) r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x430c}, 0x10) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mremap(&(0x7f0000606000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000642000/0x4000)=nil) mincore(&(0x7f0000606000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/20) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 422.320358] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 422.320358] program syz-executor2 not setting count and/or reply_len properly 23:29:17 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000040), 0xfffffe54) mremap(&(0x7f0000fbe000/0x3000)=nil, 0x3000, 0x4000, 0x4, &(0x7f0000f9c000/0x4000)=nil) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getpeername(r0, &(0x7f0000000080)=@rc, &(0x7f0000000100)=0x80) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe9000/0x14000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/35) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:17 executing program 5 (fault-call:1 fault-nth:5): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 422.424374] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 422.424374] program syz-executor3 not setting count and/or reply_len properly 23:29:17 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f00006f4000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000100000000000000000ff00000000000000000000080000380000000000000000000000000000000000"], 0x40) 23:29:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) set_tid_address(&(0x7f0000000000)) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x200, 0x300) [ 422.464835] RDS: rds_bind could not find a transport for 0.0.67.12, load rds_tcp or rds_rdma? [ 422.556830] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 422.556830] program syz-executor5 not setting count and/or reply_len properly [ 422.579319] FAULT_INJECTION: forcing a failure. [ 422.579319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.591147] CPU: 0 PID: 21513 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 422.598069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.607414] Call Trace: [ 422.610014] dump_stack+0x185/0x1d0 [ 422.613649] should_fail+0x87b/0xab0 [ 422.617372] __alloc_pages_nodemask+0x600/0x5cc0 [ 422.620898] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 422.620898] program syz-executor2 not setting count and/or reply_len properly [ 422.622135] ? kernel_poison_pages+0x1a0/0x360 [ 422.622152] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 422.622165] ? get_page_from_freelist+0xacd1/0xb7b0 [ 422.622203] ? kernel_text_address+0x34d/0x3a0 [ 422.644119] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 422.644119] program syz-executor0 not setting count and/or reply_len properly [ 422.647650] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.647672] kmsan_internal_alloc_meta_for_pages+0x8d/0x710 [ 422.647691] ? is_console_locked+0x29/0x50 [ 422.647703] ? kmsan_report+0x4f/0x2a0 [ 422.647718] ? __msan_warning_32+0x70/0xc0 [ 422.647734] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.647764] kmsan_alloc_page+0x87/0xe0 [ 422.704368] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 422.709129] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.713969] ? __msan_poison_alloca+0x15c/0x1d0 [ 422.718640] ? __kmalloc+0x2d8/0x350 [ 422.722381] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.727221] ? __msan_poison_alloca+0x15c/0x1d0 [ 422.731902] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 422.737265] ? cap_capable+0x222/0x350 [ 422.741157] alloc_pages_current+0x6b1/0x970 [ 422.745568] sg_build_indirect+0x4ee/0xc90 [ 422.749812] sg_common_write+0x2260/0x3ad0 [ 422.754069] sg_write+0x14d9/0x15b0 [ 422.757705] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.762550] ? kmsan_set_origin_inline+0x6b/0x120 [ 422.767385] ? __msan_poison_alloca+0x15c/0x1d0 [ 422.772044] ? vfs_write+0x467/0x8c0 [ 422.775757] ? __vfs_write+0xc9/0x9f0 [ 422.779545] ? vfs_write+0x467/0x8c0 [ 422.783250] ? sg_read+0x3420/0x3420 [ 422.786942] ? sg_read+0x3420/0x3420 [ 422.790635] __vfs_write+0x1aa/0x9f0 [ 422.794332] vfs_write+0x467/0x8c0 [ 422.797863] __x64_sys_write+0x1bf/0x3e0 [ 422.801905] ? ksys_write+0x360/0x360 [ 422.805684] do_syscall_64+0x15b/0x230 [ 422.809564] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 422.814733] RIP: 0033:0x455ab9 [ 422.817911] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 422.825612] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 422.832860] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 422.840122] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 422.847382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 23:29:17 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x178}], 0x1}, 0x0) 23:29:17 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000f80000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x2) 23:29:17 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x210c00, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) set_tid_address(&(0x7f0000000000)) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x200, 0x300) 23:29:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000009c0)={0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x4, 0x4df, 0x1f, 0x1, 0x40, 0x4, 0x7, 0x9, 0xcb2, 0x6, 0x4, 0x8, 0x6, 0xffffffffffff9cdf, 0x94]}, &(0x7f0000000ac0)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000b00)={0x0, 0xf4, "72c5408a26db34a73d5a643406db7e6fd8df3c45a00e1076de99a1e932d076e69c0f458a802444ed9f6afefb2d29a2f900c341afd5585e8c84fcb8b1c79b7302ed6a7bc64c94a0789f71184ec41a85a30c6e3a6e3b4a8c12f21aceb23c8c8341c038ecf5debb194525297838e20baf1de704df7e056bf49121c1745bcf85df25a0e45c9057d17496c6d1d0434afa9ec45e207d746fe1949ceb226168474bc679134a1560890658c756ae975cdd9dc111f2479e6e193e5b0f62189b2c0a9d7bc09a5eab15974159ec8b9e51624d036b3cf6a07e494dacc9158551ea9dc8f9092dc52f3af80907e8a5278eded0f6fef8b3771fb1b7"}, &(0x7f0000000c00)=0xfc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000003180)={0x0}, &(0x7f00000031c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000003200)={0x0, 0x7ff}, &(0x7f0000003240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000004d00)={0x5, 0x101, 0x2, 0x8, 0x6, 0x1ff, 0xff, 0x17183c4a, 0x0}, &(0x7f0000004d40)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000060c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x1}}, 0x81, 0x4}, &(0x7f0000006180)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000061c0)={0x0, 0x72}, &(0x7f0000006200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000006240)={0x0, @in6={{0xa, 0x4e24, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x40}}, 0xffffffffffff4367, 0x7, 0x7fff, 0x2, 0x22}, &(0x7f0000006300)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000006640)={0x0, 0x92, "eae73f39a5b97c6cd0eae76d8a3959594add52d06251e6ff84f0223ac0de67c9d7bcae71f1cd5e7a1d424f85a42c0bcf07b7e71740012ca48951b9d12398c5e28d206c82d6365d5977ea04569cb537b37465283072d85680fb0c9ee4562fd786557dd720a3ad7695b4e6f7647227cfc97508b3f03b1e895e8a90e77eeab74bdf85be63e786a61fbdc2e5d73963e95e1b086c"}, &(0x7f0000006700)=0x9a) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000006940)=@assoc_value={0x0, 0xfffffffffffffff9}, &(0x7f0000006980)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000006b40)={0x0, 0x3c, &(0x7f0000006b00)=[@in={0x2, 0x4e20, @broadcast=0xffffffff}, @in6={0xa, 0x4e20, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x1}, @in={0x2, 0x4e21, @multicast1=0xe0000001}]}, &(0x7f0000006b80)=0x10) [ 422.854630] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000005 [ 422.875032] RDS: rds_bind could not find a transport for 0.0.67.12, load rds_tcp or rds_rdma? sendmmsg$inet_sctp(r1, &(0x7f0000006c40)=[{&(0x7f0000000300)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000340)="53004a56cf65eb68c60f01fa8ed3dd0ad556b16d313342ab553d090273472348e217cfdaa8185649f51bccb488715586ff8867b7b7763196bfc3c81237d71b84e632deae429bfe2486fd8f560f6e00e07910f2cdfc492f7432fe3c7043cf3d08690ed9b04acba74972080798aaba8b5e0a27b3046c8db4da96", 0x79}, {&(0x7f00000003c0)="2007a7492219d314d5eb8e3e8091badb8c5eded506175108df30841056be148337e543d116cb5174b1de54fa407bb0c281a8a6133b433498e05eb6d8f89ca9f18c34514c86e10e12ee6659c79b22560107675757f9fc27cf4686fde92a00a07cea4bb449aaa671bd27568b6669f203f8fe49dde8cdcc819fdfb1a76b7a0c0f82175003e38b95cc27aa6e818abfa03b9c45fd2656e194df164b60c6bf58bd9a61015a1b943b76dd64e2ec5821aa81dcb773540670c9e0bcef8430cc1390128dd24685abea9eb10a9d073fbc9419209cebd0c36007adb31d993828b92c9888fce8d876", 0xe2}, {&(0x7f00000004c0)="4d61f86624dacfe48ac9a94a4569380ccb31bc008fd615ffb6e06d6e247709bb8ddda42258be4cda8993dd0bf83b771e4e5243edea3d4211cea2843be960310e42cc999340c7c2ee9f3a11ad1145fbb897434f54435ba6f9b80953a5937f8288259b0af1d1bf3bdcd41b892475fd6187ced89e8a30c312e2a612a6374e0b8c658db70ec497226fa84fc0064df907d07fcb6bbee04690151f59b5903be087a2adb3393447b87b6c28fce18340712ac2f74773033f79d879118045e147da6b865029b5431ad2b009bcad10779981d0e94df4463f2a5e27d478e8a96c81a22727221c27963766b39a457dcdb5be3f2207", 0xef}, {&(0x7f00000005c0)="c18cba192a63c4bc3873a7ebc8e6d95aaefd73699d1421f3a78af776ac538cc4a3136597571d7b3ac8d3acbd8d8c80efe30197a8a82d5ef5d1ac21f796cc8fba15445cd9cef0e2994c5cf043cf57fc048030f12f863c6798cb32db4b5860118853bf66908af737209d7781f0e1820322a51d009f0e03f06cc011eb504e0be1934d4e0f5d5f7415726dfeaa2b1d4784a1a1ed7376bf02927461ee32952ce1927cdfc0eef51b32c56763433d323cd8e74b1ddf6fbe9b8b559b0a7812e3869bddf0e8d114a66f5464c5a6d20f75c37649", 0xcf}, {&(0x7f00000006c0)="85f2a5d39f1434d647e9ae31c27f4d518489a0cf9a34bc4e8d62e4351994f365046780ea8d3d6beba26acb8010f4ef9ec675e80e1f15518d4fcd0f420692139be936289bb52265f8d5b9a5111ec76e3ac549d42f5d", 0x55}, {&(0x7f0000000740)="8e088b5191408f02a208f651f078c7fc177f4700c4fd5661abd286c775bbbd7183a4f2a7a2816b41c5b34b9b9662090336382cb4a3d705b0221a691ae8b2d5f094b40b51cc47ad7380b9e341606f8201cae7bceb29ee4e35dea6acd6b40ebad0d92f36635a0998be386fa7cda939fda85079f7e5a33b95d6e48fd8b1b8d0d135f99cd892c73b245f167201b6b809d100781154832df56f2b9b7123cb6595445feeaf0c91660fc078fbd9a3d4e14b29804eca480dd74a442177e0b5b6b8b64627da0d96f53b9650375b151cac0f78e9f4c39b8669b5b4e5ffb2454af7960a", 0xde}, {&(0x7f0000000840)="fc2782f26d2dc32d23e57ff155361cf7d5cec1f7d13a4d0617db630ea2ac35674740af252b62487cb15497faddeb0a7d55278a5c3bdf34d642cc671d266961716998226e27e71a7ef7e2383962ba388b2741e415ae20502dce7fcc76fe5a1f4277de23f49a7d32b4ae9683062e09a67c7a8b2ab7a4580c5187e6513a5edba94ad576a54978aadd3137764e540413048c7dfb27cc2feac4ad03944975be8cd34a0540bdc73da0401507d5bf5eed20689d68d4e730f3d8c3771e7c028baef02a6e77fa023606311715489b1132cf55010471daff5a9c47a20ec70a360248f7be967ff8f565545bebe60eeb5674b84a2ba7150ca2", 0xf3}], 0x7, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000008400000000000000000001f0f9ff010030000000000000008400000001000000010098c1080000000300000000000000010000000900000006000000", @ANYRES32=r3, @ANYBLOB="300000000000000084000000010000000200000007800000060000000008000005000000320000004d020000", @ANYRES32=r4, @ANYBLOB="180000000000000000000000070000000000000000000000"], 0x90, 0x801}, {&(0x7f0000000d00)=@in6={0xa, 0x4e21, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x7ff}, 0x1c, &(0x7f0000003100)=[{&(0x7f0000000d40)="17a3d65b746d4429e20970c7e4966c108fa54fcd3d1b39e1ff39a635458a2fae27e8f92c1e9243c2724ba6a585aeb36b1e4d5360c28a2ecfc70f368434bcbf7dcbbd6fa0d2", 0x45}, {&(0x7f0000000dc0)="ba5d8c25bba55465f905ba4282784676ba994a77d9b67883179df3c8bb08fcf78c68da55ba55c6dabfcb3c6cc254635e745daea7e30b23d10281c2df7f9f531defef49322bb3a4db78373ac6d820593d750bd35547b0c201f66c383747a83e5946f6dfd9b779875946c725f668cfd9e86fc6e546c81244c28062ab15be8f0abb271b927036834f188a0f28a01a3da1931e89defeb296f050f91021396cda3af0c93d70f66365dbbb99ebc590653822ff68334b5064c4f04217", 0xb9}, {&(0x7f0000000e80)="e3e164c62ee18a895caace5a385dcc48147925c1086fb34358a0a7bd5efc1a12d7432edc5d89442faa96dd564c3fab785c1fe096328f07a34d640880dea5607482398be6", 0x44}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="a4f006226ca3f07ef3d3ec4101af5c086e0d29c71f3fd2df1cfe3ef2aae54bf4374e2a4d25687c1676e3dbb1375ff6ab71274858a880d5151bc241cb4c1081b085f4b85107d870e5d725230d36a95e4041fd130701445e1212e51b", 0x5b}, {&(0x7f0000001f80)="abeba9e0860701d3c7414f9081cc00be74f1c2e4412e0b680936ddb05f286840d4a4483b6ed8c6ffc7f7a1552eede4fdca846d675b979986033fecafcc6e2826c0692ff78a5384db4896fd98d3a2d04d2f8f30baab5b64125c8d844982322ef7a6e217eeb1457c507931e1f67a3b0d7b4fbecd2af4048454e89b3c32f36f49cfcbf79eb167a76cbf7bb7c77b4e3dbdf7e08f3f414fb57f817a2a664b03e737de6569cc775e08cdac79d4b70b59ae5b6c51473c46fe005153833fc53ce2970f0d4f9376047d3a7a3415adf156781e14d49479e9", 0xd3}, {&(0x7f0000002080)="5534e9733037bd60fe1ff7273ec7f904f316ca276b6e629c3cb449ba8a92697f6fed4212760cfe059e0fd8b620b6449a47d6928676130244d4b08f924408e99172f0558adfa5dea93d729ab5ce9c025e", 0x50}, {&(0x7f0000002100)="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", 0x1000}], 0x8, &(0x7f0000003280)=[@init={0x18, 0x84, 0x0, {0x3, 0x0, 0xfffffffffffff801, 0x38e}}, @sndrcv={0x30, 0x84, 0x1, {0xc362, 0x0, 0xc, 0x5, 0x8, 0x1, 0x10000, 0x6, r5}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x10}}, @init={0x18, 0x84, 0x0, {0xfffffffffffffff8, 0x89, 0x9, 0xbab}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x0, 0x400000000000, 0x8, r6}}], 0xb0, 0x1}, {&(0x7f0000003340)=@in6={0xa, 0x4e20, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c, &(0x7f0000003580)=[{&(0x7f0000003380)="2ca8b1e407b8ec57ac747bdd4f495c591478c21c5ddd5ad5a169ab1d94226f88e4b200de05338127bd30fedda5c476bda9f3dc72ac0f555bb4df187bf30198cdaa545e8b1f0e5efe182c7650429894a6e18f6e8738152f4fadabb3891fe3c8b293c9f9a3f723ac9323d68a95712ba1230703cdb787e5b49596f70b07891a0278949571a5b48ab2b13d1109dd94cdbeba0de47c14f33ba2810b3ad1a95711b34ac610aeecc954cf8a9dd1849ba52176fe5e19b0dcdc82b88a8ce2c02e800d8fd515ea8eef0368dff788a63c590dde08f9fb91ac5908b8300aa5800716f0500f746c0e23e1acfeb8064b992e8516afc89cb91fce", 0xf3}, {&(0x7f0000003480)="016ccd95f1ec40a993ea95d40856040b0ed65444e31c9799cbae73547a8242c357dc7e799ac1947300710ff1e871c0a35339199790a60b5a57ff05d4406b21eaa275e6504942f8bda0176ae7548e5ccaddbb6f41f8e141961850cdee926e8b40ecfd629059a498a579274bb439986b278b41a4a90ac48057a1cfc01d784a27a352dc54c5ba8d3777458a999873de259235502debf29b4bd565f4128b15a5269842c932d817651218f27841cce94f5dd19977ffa17fb55000dc7b07405caaa310ad", 0xc1}], 0x2, &(0x7f00000035c0)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast=0xffffffff}, @init={0x18, 0x84, 0x0, {0x3, 0xd800000000, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xa}}], 0x68, 0x10}, {&(0x7f0000003640)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000004a80)=[{&(0x7f0000003680)="9c2c3a1da3a9bdc86ef06c9427c80e5f34b026bd47565460ee4f8f866fdf23b29272387f4ed724028fa2095464cf996e06b94f1dd063289fc5288826b4d31ae982a7e04d1f5b3f4772ec9a75f1dedc21459f99da5a9cb15578abb2075b54a0", 0x5f}, {&(0x7f0000003700)="5452963b0b7c759f7675442c43a9d60c37f3e201d33bc47655f5498261e30e552858a2c629b4721e56505a247a9a84c49733fbed02338d75e68b35e790050c046d8e4d6e339e67eaa0c434f740e25e4e67a7abad9959d03b70887201e824aa5409d434c98e0ed139ffa1c6bd4193c78201d2e3883c14602af675c697eceaf04f3596420c224a9d1b0d895c99716edc6471288e03f67c0c318af9e4fad529e77bc506e3b02c3f6ddd46d567a663b162e437d25c94a107d6784acdef4db155f01f6331334d1c6c3eefdd53f7666768caeeec80178847d2b5afe9aac2846e7419751caa9f2d44cf36c2a6d487de", 0xec}, {&(0x7f0000003800)="b31708bd8f15bb155e167eae9ce1be74ce0e85482dc5ef70baab7cb6c1ddaf", 0x1f}, {&(0x7f0000003840)="3684ee1d44af60f7f8e239cd20abbc4498a0abf45411c4233537f949829bf973b46082afa1ccfdf5de4041f2d00bcae3c7bc55d31357ea871bd2b168f057d2fdee4504a79d3b2130d575e0b03259d13c02e70c21d2f94d9268a79813b4a6922f6fd460760489ac861b60a3f3a211064d54b978186e21d4883e4f88aa17c4d8dc8c9b0bfc", 0x84}, {&(0x7f0000003900)="ae5f4341a5cb26cb49854277891b0644c3655b8f5b925bfa76a99dcbc6e2", 0x1e}, {&(0x7f0000003940)="6c9b18805782d7975b1dc39c1eeb69f1fe46c5592e254346f584fd486ddce955c7d413c2c4132831c2fc5eaf30bb86b0fd48bb5741fee131188fc847198c188b732a42d67eac9b6f1abcdf51266038d384834f8313d665f01ea97e3443908419505f0a3a0326a001612bf76f043df569b2ef9a02369e9cba1ac3fee7be7b577cb1894bbe5dae1d9d847c1a94aea10be01470e279b533d1ac2c0f836196af70c5ac6333cdd90cbc9172bf5240dc40b21ab0c1a74bb90df4", 0xb7}, {&(0x7f0000003a00)="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", 0x1000}, {&(0x7f0000004a00)="9e774b73bf78e6b2163249c2a6efef9ec605a7ea2d73e58f6d2765cbfc86fbcf31aad94ad79c1108e801a14d871262de05ea99e2e475d3b5b132aedfe47b21dc07c332bcd6e7136ea6d35ad28b6fedb854e4e655ebff2ab74cd61dcb92be5def7ceff97a8f1a219c22cba6d39e38526f", 0x70}], 0x8, 0x0, 0x0, 0x40080}, {&(0x7f0000004b00)=@in6={0xa, 0x4e22, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x80000001}, 0x1c, &(0x7f0000004cc0)=[{&(0x7f0000004b40)="9ec574a55d0f4cc5a8de12c85a10bd274edd0f31793ef78d030001635488acdb52fd04fbd4df501c856e4af2be52c4924a68dc72cd19b13b1a4bc142a5ba7ac81b5d004891b03d706a581153632c98eab13352ec211dcfabf04daf35855b75eab30213b8c581162ed9d2ba6c51c5f3046c9cb5621b1a91f8f7e3098d854cb7f0e2ed6c848228b8f0df9e7fb7c56087d5dac8bae2fb01ad8657d2b9cd30f30683e0fbd37d95fcc827e4d5564facc280ab0bd8c76021c33901e13afd7c35ab2390f221ff531238a208c8ff93abfe3995", 0xcf}, {&(0x7f0000004c40)="bc25ab17fc4eb3ee1abb6d8e2e5d30d6742857a9e43ab32c08f94f2214015fa3789dce16f6dfbc38d3d2873582eeed0e6dd4b18c5ab09e1c1932535b2f273adb84dc445b5e862bc48649494144b605cd7f4cf39799df0385", 0x58}], 0x2, &(0x7f0000004d80)=[@dstaddrv6={0x20, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}, @init={0x18, 0x84, 0x0, {0x0, 0x9, 0xfff00000000000, 0x8}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x74}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x2}}, @init={0x18, 0x84, 0x0, {0x66f7, 0x5, 0x8, 0x6}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @init={0x18, 0x84, 0x0, {0x7, 0x6, 0x0, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x8, 0x8002, 0x7ff, 0x4, 0x871, 0x4, 0xc6, r7}}], 0xe0, 0x40000}, {&(0x7f0000004e80)=@in6={0xa, 0x4e24, 0x8001, @empty, 0x81}, 0x1c, &(0x7f0000006080)=[{&(0x7f0000004ec0)="9da926633da86336b1fa6cb272e906816619fe0fca1530066e6241c30cc3ed8d26e69e14f32f68c399465eb0e3115d6615d40214f5496e466d27b301a0a8dc7134f88a8201195891462daab85f40b8e317a145003ea6dfc705708483a3aa4a9bd63720094d93576a9c75249b74a88b11debaa5d2bd3578519b75b657f94d0cb3c2fd414fc0841e0c637ca465e95318c2be18048cdbc9c9b1981d2f", 0x9b}, {&(0x7f0000004f80)="efd8c8e6f4e574119e30b356dbe0618e327c259806c8c2643e1c9979a98a9917bcda113f7ce72af7457b524f41c1f9547cfc83737d5a012bef14c717661d9f0cd9fe2da018b331596d141b737fc290273b97f73df67a034ed201bdce43cbc707fc2a7215400e9554d285b5fe6aa866211165b65e1d55313b040984f9eafc4ded70663c2c8aaaf031c968423f116b0ac29f6eebc6bb60f7d118db80c0e8fa4dcb9e7feb957304d8891ea1182ba7dadf099af8ff8535572dfa9fe86e8726e9e28b31c8ee66058e546e12586c21", 0xcc}, {&(0x7f0000005080)="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", 0x1000}], 0x3, &(0x7f0000006340)=[@sndinfo={0x20, 0x84, 0x2, {0x100000000, 0x4, 0x4, 0x4, r8}}, @sndinfo={0x20, 0x84, 0x2, {0xfbb, 0x4, 0x1, 0x20200000000, r9}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback=0x7f000001}, @authinfo={0x18, 0x84, 0x6}, @init={0x18, 0x84, 0x0, {0x0, 0x65a, 0x8001, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x60c, 0x8000, 0x7f, 0x4, r10}}], 0xc0, 0x80}, {&(0x7f0000006400)=@in={0x2, 0x4e24, @rand_addr=0x80}, 0x10, &(0x7f0000006600)=[{&(0x7f0000006440)="59a12618bc5049d1ea05ff9c56850323a9efa5f1bf9d448ac6b0dd20261e5d61e09a8fee4ac41590afafff770bb39fa0bc02af4ba4beb30d092b9ab430cfbf81a9a810", 0x43}, {&(0x7f00000064c0)="794fb16a604536336f6982274f47e01e1a70f1b560625c4e51a71771d2b3b3e1b48ce4f072eb17a21941161cfc7f844721f1bbf0fed96c7006148b4df13578c798df39dfe119f3b2b5041bcebe3a65c18dc1357456", 0x55}, {&(0x7f0000006540)="bacb695c793ec0d6b051fbf79813f90310dcb3a031bab78366f62ba01b5791b2a31d52cb362e7ad11e4c40d5d4f6ef405e019164c9e68fcf816b3e774e98045b79fec8812068d7f2e0ca1748dae9e3ff8dc634191df9e7b6926018cda80c86b7ff606ee8f7c9b76cbcebce438f11c3df3064c1042ec09ff6fb5d5a979909ae1d1828047eb60b1ea61a9164272811affd5c41c853b5a5575c489f30da9f9cdc94508a", 0xa2}], 0x3, &(0x7f0000006740)=[@authinfo={0x18, 0x84, 0x6, {0x26}}, @sndrcv={0x30, 0x84, 0x1, {0x1ff, 0x3, 0x4, 0x2, 0x5, 0x4, 0x8001, 0x7fe0000000000, r11}}, @authinfo={0x18, 0x84, 0x6, {0xce}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8001}}, @prinfo={0x18, 0x84, 0x5, {0x30}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1={0xff, 0x1, [], 0x1}}], 0xb0, 0x4}, {&(0x7f0000006800)=@in={0x2, 0x4e20, @loopback=0x7f000001}, 0x10, &(0x7f0000006900)=[{&(0x7f0000006840)="c70145eee9bc7cb192fb376082c291670921e59d035f94fd39d3a36380c56d93849f29e73d88f8a294a3011023cda5f2c9b144ae8775150cee916877a6a746264a4d56049ae1adc1e5745e5cc6db3cd9e9a6328aa441e8f05e3a20ddf313083f6a2819cc87fbe1e6a65f4f355b8280f611d6325ae3fdb9d2eb78eb0ef7afe7007a5d761f29bacbf3e3e1316d422bbd3b3adf24a43d68025a7d7e4a32da023009263dc700b31a66ea9fef6034eb80fd4ae28c8a714b955b096f0357", 0xbb}], 0x1, &(0x7f00000069c0)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x8200, 0x3f, 0x5, r12}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1=0xe0000001}], 0x38}, {&(0x7f0000006a00)=@in6={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c, &(0x7f0000006ac0)=[{&(0x7f0000006a40)="e43a4d", 0x3}, {&(0x7f0000006a80)="d28974d2947575ec032c94441c78488d355f0ce2a333", 0x16}], 0x2, &(0x7f0000006bc0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x3ff}}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [0xff, 0xff]}}, @init={0x18, 0x84, 0x0, {0xa3, 0x7fff, 0x1f, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0xffffffffffffff73, 0x0, 0x0, 0x8, 0x9, 0xc6d, 0x9, r13}}], 0x80, 0x811}], 0x9, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x7fffffff, 0x20e, 0x800, 0x8, 0x0}, &(0x7f00000000c0)=0x10) sendto(r2, &(0x7f0000000200)="04250e36be119dc8dbe8ab659505ac7c1c84cb81c0186e8968bf93f34c9d38e78958d0cb6c67c6199bba8091667730ef1272f463e76e73522e0a8ff586410b3e258829d3d4ae3abb65a8f5ee", 0x4c, 0x4000000, &(0x7f0000000280)=@un=@file={0x1, './file0\x00'}, 0x80) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={r14, 0x71, "814d817e55310dd29b5a55774c08f9f43c8e2952f1b626ca340e97fa661cde5f01017f9afaa4badf4dd5b94673161a7076042f291ad56857829022f2800ed4d2306cc6814138e8926a8ee352988e0d1675c52c8402cfaac8a5bdc9d7f5d1fddae2125fc7bc39dfdc25fb23ec7a84712c35"}, &(0x7f0000000180)=0x79) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) fcntl$addseals(r0, 0x409, 0x0) 23:29:17 executing program 5 (fault-call:1 fault-nth:6): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 422.960275] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 422.960275] program syz-executor3 not setting count and/or reply_len properly 23:29:18 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x63a, 0x6, 0x3}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 423.040463] FAULT_INJECTION: forcing a failure. [ 423.040463] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.052310] CPU: 0 PID: 21539 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 423.059232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.068583] Call Trace: [ 423.071179] dump_stack+0x185/0x1d0 [ 423.074813] should_fail+0x87b/0xab0 [ 423.078537] __alloc_pages_nodemask+0x600/0x5cc0 [ 423.083299] ? kernel_poison_pages+0x1a0/0x360 23:29:18 executing program 0: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = memfd_create(&(0x7f00000002c0)='/dev/mixer\x00', 0x2) fcntl$getflags(r0, 0x408) r1 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {0x6}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xec2d}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe5c1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4400, 0x0) [ 423.087887] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 423.093339] ? get_page_from_freelist+0xacd1/0xb7b0 [ 423.098364] ? kernel_text_address+0x34d/0x3a0 [ 423.102949] ? __kernel_text_address+0x34/0xe0 [ 423.107636] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 423.113098] kmsan_internal_alloc_meta_for_pages+0x105/0x710 [ 423.118924] ? is_bpf_text_address+0xb4/0x4b0 [ 423.123427] ? __kernel_text_address+0x34/0xe0 [ 423.128019] ? kmsan_set_origin_inline+0x6b/0x120 [ 423.132870] kmsan_alloc_page+0x87/0xe0 23:29:18 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f00006e8000/0x2000)=nil, 0x2000, 0x7b) pipe(&(0x7f00000001c0)) [ 423.136846] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 423.141612] ? kmsan_set_origin_inline+0x6b/0x120 [ 423.146459] ? __msan_poison_alloca+0x15c/0x1d0 [ 423.151141] ? kmsan_set_origin_inline+0x6b/0x120 [ 423.155987] ? __msan_poison_alloca+0x15c/0x1d0 [ 423.160671] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 423.166043] ? cap_capable+0x222/0x350 [ 423.169936] alloc_pages_current+0x6b1/0x970 [ 423.174436] sg_build_indirect+0x4ee/0xc90 [ 423.178694] sg_common_write+0x2260/0x3ad0 [ 423.182928] ? kmsan_set_origin_inline+0x6b/0x120 [ 423.187782] sg_write+0x14d9/0x15b0 [ 423.191418] ? kmsan_set_origin_inline+0x6b/0x120 [ 423.196285] ? kmsan_set_origin_inline+0x6b/0x120 [ 423.201131] ? __msan_poison_alloca+0x15c/0x1d0 [ 423.205803] ? vfs_write+0x467/0x8c0 [ 423.209521] ? __vfs_write+0xc9/0x9f0 [ 423.213336] ? vfs_write+0x467/0x8c0 [ 423.217053] ? sg_read+0x3420/0x3420 [ 423.220769] ? sg_read+0x3420/0x3420 [ 423.224488] __vfs_write+0x1aa/0x9f0 [ 423.228218] vfs_write+0x467/0x8c0 [ 423.231766] __x64_sys_write+0x1bf/0x3e0 [ 423.235834] ? ksys_write+0x360/0x360 23:29:18 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000540)=""/90, &(0x7f00000003c0)=0x5a) r1 = socket(0x11, 0x5, 0x3ff) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000002c0)={'irlan0\x00', 0x7}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x2}, &(0x7f0000000280)=0x8) r3 = dup2(r0, 0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, @dev}]}) r4 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xfffffffffffffff1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000480)=0x7, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000380), &(0x7f00000004c0)=0x4) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x800000000000400, 0x0) ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000100)=r5, 0x4) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000340)={0x0, 0x1, {0xb, 0x2c, 0xc, 0x15, 0x2, 0x2, 0x0, 0x3d, 0xffffffffffffffff}}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x7, 0x84fb}, 0x3a0) [ 423.239639] do_syscall_64+0x15b/0x230 [ 423.243531] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 423.248716] RIP: 0033:0x455ab9 [ 423.251928] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 423.259639] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 423.266906] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 423.274175] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 423.281464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 423.288830] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000006 23:29:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000080)="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", 0xff) 23:29:18 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x22003, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x1f, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 423.342387] IPVS: length: 90 != 8 23:29:18 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000000)={0xe9, ""/233}) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 423.387780] IPVS: length: 90 != 8 23:29:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:18 executing program 0: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000752000/0x2000)=nil, 0x2000, 0x8) r0 = shmget$private(0x0, 0x4000, 0x180, &(0x7f0000f2c000/0x4000)=nil) shmat(r0, &(0x7f0000ec0000/0x1000)=nil, 0x0) eventfd2(0x10000, 0x0) munlockall() 23:29:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffd00, 0x0, 0x0, 0x0, 0x38}, [], "ce1ef5f98567aa21d27baeb7daf00600000000000000010001d7115a0e0c7b6edd852b42c9c1de956211ce73eb50308beda44b6ea0792bc1c0f72e81a6e6236cc48febf33bb8e69c96d7d968d91a09830423d144799f772505f99b18ed433be62c8763acaa2f09ea03929f9cbbf2145c9ea3ab38ce95e492bbab7b2786e20a6933bd1946efb544d5312b82dba7a7207cb9d05034db80b4cda370e3210b48b086505ad43a0000000000000000"}, 0x80) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000180)=""/138) 23:29:18 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x17e}], 0x1}, 0x0) 23:29:18 executing program 5 (fault-call:1 fault-nth:7): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:18 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4407fe, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x10) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00006de000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="a3000000c1ff0500070063045069778d21acb9d1f5d35d55b24c2471fbe7da053ce84ccf2a0cb7930305971d23a9dce7ac651837854591a8f5e3788cffdfb7d15db95da9a74906cc44e357f49625753b821057194f111e8ee6e4771016a0cd6b2c34e72c2ddda92df3cafe6906e6a3b5095f1be5abd0346ab473fe10823f94da36ae124f895e384a639897dcfb0a2c95e9075d2d6320cd3ed2efad7ae0b4e72366062979697cc464cbd907dd7e2716d2274d68f7e3a0597b25266ff4356d78933059febf160585da6d6cde2927480b39e0b6df10e1c8f48c1bad07acb302a7dfc7f1e8b8baa91eaffc"], 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0x2, 0x0, 0x7, 0x3, 0x7, 0x9, 0x0, 0x9}}) 23:29:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280)=0x800000000007, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = dup(r1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000200)={0x1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, @link_local}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) io_setup(0x8001, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000380)={'syz_tun\x00', @ifru_names='rose0\x00'}) io_destroy(r3) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x800) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ftruncate(r5, 0x80080) sendfile(r2, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) 23:29:18 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000884000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:18 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000e3e000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) [ 423.901562] FAULT_INJECTION: forcing a failure. [ 423.901562] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 423.914221] CPU: 1 PID: 21585 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 423.921172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.930677] Call Trace: [ 423.933316] dump_stack+0x185/0x1d0 [ 423.937023] should_fail+0x87b/0xab0 [ 423.940790] __alloc_pages_nodemask+0x600/0x5cc0 [ 423.945620] ? kmsan_set_origin_inline+0x6b/0x120 [ 423.950523] ? __msan_poison_alloca+0x15c/0x1d0 [ 423.955228] ? kmsan_set_origin_inline+0x6b/0x120 [ 423.960107] ? __msan_poison_alloca+0x15c/0x1d0 [ 423.964814] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 423.970207] ? cap_capable+0x222/0x350 [ 423.974139] alloc_pages_current+0x6b1/0x970 [ 423.978603] sg_build_indirect+0x4ee/0xc90 [ 423.982891] sg_common_write+0x2260/0x3ad0 [ 423.987187] ? kmsan_set_origin_inline+0x6b/0x120 [ 423.992098] sg_write+0x14d9/0x15b0 [ 423.995803] ? kmsan_set_origin_inline+0x6b/0x120 [ 424.000694] ? kmsan_set_origin_inline+0x6b/0x120 [ 424.005647] ? __msan_poison_alloca+0x15c/0x1d0 [ 424.010375] ? vfs_write+0x467/0x8c0 [ 424.014146] ? __vfs_write+0xc9/0x9f0 [ 424.017996] ? vfs_write+0x467/0x8c0 [ 424.021758] ? sg_read+0x3420/0x3420 [ 424.025518] ? sg_read+0x3420/0x3420 [ 424.029270] __vfs_write+0x1aa/0x9f0 [ 424.033058] vfs_write+0x467/0x8c0 [ 424.036668] __x64_sys_write+0x1bf/0x3e0 [ 424.040772] ? ksys_write+0x360/0x360 [ 424.044605] do_syscall_64+0x15b/0x230 23:29:19 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x8000000000000065, &(0x7f0000000040)=0xfffffffffffffffc, 0xd1) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4656000000000000000000000040000000002000000deefedd2b624905288b5100000000000000004000000000000800000e000000000000000000000000380de2ff1ad7c72176fe0b4c05000000000000000000f186b646701348c055f3e459d7bc8929e820e4e157402c74097b5aaad2ab1db9ea3cb794c9b96ae08197ce642507249718ef5775e2ebccc570d6f76658"], 0x40) [ 424.048543] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 424.053751] RIP: 0033:0x455ab9 [ 424.057015] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 424.064762] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 424.072062] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 424.079355] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 424.086649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 424.094006] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000007 23:29:19 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000f7a000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f00006c4000/0x1000)=nil) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xee4, 0x40000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x5}}, 0x20) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x2, 0x5, 0x2, 0x3d, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_sec_ctx={0x20, 0x18, 0x7fff, 0x6, 0xf8, "2f9a4c0f603f0ba05b1ceb9028c2770e93f70c311ea810dca33698cbf7e2d7d0e782c7659bf8e6070b7585156c9e43613354cbb1721be59fa6d05fdc9388e5310875f4ceb8d735fc5fb8e44e50a44119aa5d11dbf1ace06b03bb7f8028ad8990b2afc8a3d2f49b39db95375ec59e9d462a69dda165dbd19f8a6504043a523039d4643e885e9055e0b9b4e58746548b7cf7a4ce12002df45d9e78b7fc5f4b6aaf33f561b6e6886c6fd8f3ec746ae7ca962dec1959136252a5fb7ea8df987b64da98def7178a482ea80a12ba7bf2110492fbbdae13a06bc9a162760c3eb29d1ce327a3b95322289b993823f1a8cca70f0db70ae40732892d4a"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x1d}, 0x6}, @in={0x2, 0x4e21, @multicast2=0xe0000002}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7f, 0x10001, 0x8, 0x85, 0x80000000}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e22, 0x5ad, @empty, 0x7fff}, @in={0x2, 0x4e20, @loopback=0x7f000001}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e22, 0x20, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x3}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_ident={0x2, 0xa, 0x62, 0x0, 0x2}]}, 0x1e8}, 0x1}, 0x8040) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:19 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3f, @mcast1={0xff, 0x1, [], 0x1}, 0x3}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0x5}, &(0x7f0000000300)=0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x800) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x1, 0x4) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2459, 0x8c874bd50a3632c6) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000100)=0x7) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0xffffffffffff7fff) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:19 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x1, 0x2) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000300)={{&(0x7f00000001c0)=""/247, 0xf7}, &(0x7f00000002c0), 0x20}, 0x1f0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) getsockname$inet6(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) madvise(&(0x7f0000eab000/0x1000)=nil, 0x1000, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8) r3 = getegid() syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0xc000, r2, r3, 0x8, 0x60, 0x8084) accept(r1, 0x0, &(0x7f00000004c0)) 23:29:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:19 executing program 5 (fault-call:1 fault-nth:8): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x121000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000340)={0x5, 0x7fffffff, 0x3, 0x8, 0x2, 0x100000000, 0x7, 0x0, 0x0}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e24, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}, 0xc85, 0xa94, 0x1f, 0x20, 0x11}, &(0x7f0000000480)=0x98) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f00000004c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000500)={r0, 0x0, 0x8001, 0x8, 0xee}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x4, 0xb299, 0x4}, &(0x7f0000000280)=0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r4, 0x300, 0x70bd25, 0x25dfdbfd, {0xb}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xeb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x48084) [ 424.345521] FAULT_INJECTION: forcing a failure. [ 424.345521] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 424.357369] CPU: 0 PID: 21606 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 424.364299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.373650] Call Trace: [ 424.376246] dump_stack+0x185/0x1d0 [ 424.379885] should_fail+0x87b/0xab0 [ 424.383616] __alloc_pages_nodemask+0x600/0x5cc0 [ 424.388377] ? kernel_poison_pages+0x1a0/0x360 [ 424.392965] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 424.398424] ? get_page_from_freelist+0xacd1/0xb7b0 [ 424.403444] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 424.408849] kmsan_internal_alloc_meta_for_pages+0x8d/0x710 [ 424.414560] ? is_bpf_text_address+0xb4/0x4b0 [ 424.419068] ? __kernel_text_address+0x34/0xe0 [ 424.423720] ? kmsan_set_origin_inline+0x6b/0x120 [ 424.428568] kmsan_alloc_page+0x87/0xe0 [ 424.432546] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 424.437318] ? kmsan_set_origin_inline+0x6b/0x120 [ 424.442169] ? __msan_poison_alloca+0x15c/0x1d0 [ 424.446843] ? __kmalloc+0x2d8/0x350 [ 424.450565] ? kmsan_set_origin_inline+0x6b/0x120 [ 424.455407] ? __msan_poison_alloca+0x15c/0x1d0 [ 424.460174] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 424.465536] ? cap_capable+0x222/0x350 [ 424.469431] alloc_pages_current+0x6b1/0x970 [ 424.473849] sg_build_indirect+0x4ee/0xc90 [ 424.478092] sg_common_write+0x2260/0x3ad0 [ 424.482399] ? kmsan_set_origin_inline+0x6b/0x120 [ 424.487255] sg_write+0x14d9/0x15b0 [ 424.490898] ? kmsan_set_origin_inline+0x6b/0x120 23:29:19 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 424.495746] ? kmsan_set_origin_inline+0x6b/0x120 [ 424.500588] ? __msan_poison_alloca+0x15c/0x1d0 [ 424.505261] ? vfs_write+0x467/0x8c0 [ 424.508976] ? __vfs_write+0xc9/0x9f0 [ 424.512776] ? vfs_write+0x467/0x8c0 [ 424.516506] ? sg_read+0x3420/0x3420 [ 424.520214] ? sg_read+0x3420/0x3420 [ 424.523929] __vfs_write+0x1aa/0x9f0 [ 424.527647] vfs_write+0x467/0x8c0 [ 424.531196] __x64_sys_write+0x1bf/0x3e0 [ 424.535287] ? ksys_write+0x360/0x360 [ 424.539101] do_syscall_64+0x15b/0x230 [ 424.543011] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 424.548201] RIP: 0033:0x455ab9 [ 424.551386] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 424.559120] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 424.566404] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 424.573667] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 424.580933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 424.588213] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000008 23:29:19 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x17e}], 0x1}, 0x0) 23:29:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8b1, 0x800) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c465600e0ffffffffffffff000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) 23:29:19 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f000067e000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000669000/0x600000)=nil, 0x600000, 0x40000000000008) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1b1601, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 23:29:19 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfff, 0x202480) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/autofs\x00', 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xff7ffffffffffffa, &(0x7f0000000080)=0x4, 0xffffff5f) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x29) sendto(r0, &(0x7f0000000100)="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", 0x1000, 0x20000000, &(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0x10001}, 0x0, 0x0, 0x0, 0x2}}, 0x80) 23:29:19 executing program 1: modify_ldt$write(0x1, &(0x7f0000000000)={0x7, 0x20000000, 0x2000, 0x3, 0xb3c, 0x0, 0xfffffffffffffff9, 0x4, 0x81, 0x9}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000140)=[0x0]) fchownat(r0, &(0x7f0000000080)='./file0\x00', r1, r2, 0x1800) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:19 executing program 5 (fault-call:1 fault-nth:9): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280)=0x800000000007, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = dup(r1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000200)={0x1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, @link_local}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) io_setup(0x8001, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000380)={'syz_tun\x00', @ifru_names='rose0\x00'}) io_destroy(r3) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x800) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ftruncate(r5, 0x80080) sendfile(r2, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) [ 425.015464] FAULT_INJECTION: forcing a failure. [ 425.015464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.027773] CPU: 0 PID: 21633 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 425.027780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.027803] Call Trace: [ 425.046920] dump_stack+0x185/0x1d0 [ 425.050556] should_fail+0x87b/0xab0 [ 425.054279] __alloc_pages_nodemask+0x600/0x5cc0 [ 425.059044] ? kernel_poison_pages+0x1a0/0x360 23:29:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) io_setup(0xff, &(0x7f0000000000)) [ 425.063633] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 425.069171] ? get_page_from_freelist+0xacd1/0xb7b0 [ 425.074286] ? kernel_text_address+0x34d/0x3a0 [ 425.078868] ? __kernel_text_address+0x34/0xe0 [ 425.083451] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 425.088919] kmsan_internal_alloc_meta_for_pages+0x105/0x710 [ 425.094719] ? is_bpf_text_address+0xb4/0x4b0 [ 425.099243] ? __kernel_text_address+0x34/0xe0 [ 425.099260] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.099288] kmsan_alloc_page+0x87/0xe0 [ 425.112662] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 425.117426] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.122272] ? __msan_poison_alloca+0x15c/0x1d0 [ 425.126949] ? __kmalloc+0x2d8/0x350 [ 425.130662] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.135505] ? __msan_poison_alloca+0x15c/0x1d0 [ 425.140272] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 425.145630] ? cap_capable+0x222/0x350 [ 425.149521] alloc_pages_current+0x6b1/0x970 [ 425.153936] sg_build_indirect+0x4ee/0xc90 [ 425.158180] sg_common_write+0x2260/0x3ad0 23:29:20 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) clone(0x90118000, &(0x7f0000000000)="45cd05e36b3167a0d75e7fd318c4c5e6a308215483b90e01b197a8dcfbbc0c9555f47adbb969a188107124fe680d7e7f5dc3347e415954c1b6fe5a822bad4ab0ccb96fa2ab4eca2a9a053dc7d9bc59ca74aa71ff7cc70f8465d8ceb29b4f", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="e96a5e0b80e5cf34797a15d1f90217c8748174c258f979b867a57b32a08e18fc28c1cbb3c093daf4b3439897629da152110e5ff8741618fc634c7c528405454c8b977d1c90581f961949fa1e75ab17c0ad3979348b84861c9fe9efcb77f81146d85cd89cf701573e1e1fe830aad5560979074648e053898c7cf82e9c3572983470fb9774e7833d51ef780a93394cf5d8a597b9d0cccbcdc5d377918cd90afad614a9258e1681425d1d507c3e9f6500d1869336fdc60c8be3c6fdce7308863d5917fd07e06a883ee96a386cc1c390f658737f1bc2e7f34957682152") mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x6) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0x1c}, 0x100, 0x0, 0xff, 0xd, 0x3, 0x1ff, 0x400}, 0x20) [ 425.162419] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.167281] sg_write+0x14d9/0x15b0 [ 425.170921] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.176635] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.181480] ? __msan_poison_alloca+0x15c/0x1d0 [ 425.186147] ? vfs_write+0x467/0x8c0 [ 425.189859] ? __vfs_write+0xc9/0x9f0 [ 425.193655] ? vfs_write+0x467/0x8c0 [ 425.197458] ? sg_read+0x3420/0x3420 [ 425.201166] ? sg_read+0x3420/0x3420 [ 425.204879] __vfs_write+0x1aa/0x9f0 [ 425.208615] vfs_write+0x467/0x8c0 [ 425.212165] __x64_sys_write+0x1bf/0x3e0 23:29:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 425.216235] ? ksys_write+0x360/0x360 [ 425.220123] do_syscall_64+0x15b/0x230 [ 425.224023] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 425.229209] RIP: 0033:0x455ab9 [ 425.232396] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.240190] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 425.247458] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 425.254732] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 425.262006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 425.269295] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000009 23:29:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:20 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x90002, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'bond_slave_0\x00'}) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x40) 23:29:20 executing program 5 (fault-call:1 fault-nth:10): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x5}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4001}}]}, 0x2c}, 0x1}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0xffff, 0x2) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') accept$packet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000280)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) recvmmsg(r1, &(0x7f0000007140)=[{{&(0x7f0000000300)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/20, 0x14}, {&(0x7f00000004c0)=""/92, 0x5c}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f00000005c0)=""/138, 0x8a}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/180, 0xb4}, {&(0x7f0000001740)=""/232, 0xe8}, {&(0x7f0000001840)=""/194, 0xc2}, {&(0x7f0000001940)=""/243, 0xf3}], 0xa, &(0x7f0000001b00)=""/122, 0x7a, 0x7}, 0x525}, {{&(0x7f0000001b80)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001c00)=""/248, 0xf8}, {&(0x7f0000001d00)=""/159, 0x9f}, {&(0x7f0000001dc0)=""/240, 0xf0}, {&(0x7f0000001ec0)=""/94, 0x5e}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/118, 0x76}], 0x6, &(0x7f0000003040)=""/238, 0xee, 0x1a6}, 0xdb40}, {{&(0x7f0000003140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004280)=[{&(0x7f00000031c0)=""/146, 0x92}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f00000042c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004340)=""/224, 0xe0}, {&(0x7f0000004440)=""/199, 0xc7}, {&(0x7f0000004540)=""/238, 0xee}, {&(0x7f0000004640)=""/194, 0xc2}], 0x4, &(0x7f0000004780)=""/154, 0x9a, 0x3}, 0xd4e7}, {{&(0x7f0000004840)=@pptp={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004980)=[{&(0x7f00000048c0)=""/156, 0x9c}], 0x1, &(0x7f00000049c0)=""/215, 0xd7, 0x536}, 0xe2ba}, {{&(0x7f0000004ac0)=@in={0x0, 0x0, @loopback}, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000004b40)=""/196, 0xc4}, {&(0x7f0000004c40)=""/193, 0xc1}, {&(0x7f0000004d40)=""/185, 0xb9}, {&(0x7f0000004e00)=""/51, 0x33}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/120, 0x78}, {&(0x7f0000005ec0)=""/110, 0x6e}, {&(0x7f0000005f40)=""/98, 0x62}, {&(0x7f0000005fc0)=""/4096, 0x1000}], 0x9, &(0x7f0000007080)=""/160, 0xa0}, 0x6}], 0x6, 0x10000, &(0x7f00000072c0)) recvmmsg(r0, &(0x7f000000db80)=[{{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007300)=""/46, 0x2e}, {&(0x7f0000007340)=""/48, 0x30}, {&(0x7f0000007380)=""/62, 0x3e}, {&(0x7f00000073c0)=""/148, 0x94}, {&(0x7f0000007480)=""/90, 0x5a}], 0x5, &(0x7f0000007580)=""/43, 0x2b, 0x7f}, 0x3ff0000000000000}, {{&(0x7f00000075c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000009700)=[{&(0x7f0000007640)=""/175, 0xaf}, {&(0x7f0000007700)=""/4096, 0x1000}, {&(0x7f0000008700)=""/4096, 0x1000}], 0x3, &(0x7f0000009740)=""/79, 0x4f, 0x200}, 0x1}, {{&(0x7f00000097c0)=@ipx, 0x80, &(0x7f000000a980)=[{&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/66, 0x42}, {&(0x7f000000a8c0)=""/170, 0xaa}], 0x3, &(0x7f000000a9c0)=""/117, 0x75, 0x6}, 0x4}, {{&(0x7f000000aa40)=@ax25, 0x80, &(0x7f000000b180)=[{&(0x7f000000aac0)=""/195, 0xc3}, {&(0x7f000000abc0)=""/151, 0x97}, {&(0x7f000000ac80)=""/181, 0xb5}, {&(0x7f000000ad40)=""/250, 0xfa}, {&(0x7f000000ae40)=""/223, 0xdf}, {&(0x7f000000af40)=""/30, 0x1e}, {&(0x7f000000af80)=""/231, 0xe7}, {&(0x7f000000b080)=""/146, 0x92}, {&(0x7f000000b140)=""/51, 0x33}], 0x9, &(0x7f000000b240)=""/204, 0xcc, 0x4}, 0xfffffffffffffffc}, {{&(0x7f000000b340)=@nl, 0x80, &(0x7f000000b540)=[{&(0x7f000000b3c0)=""/233, 0xe9}, {&(0x7f000000b4c0)=""/74, 0x4a}], 0x2, &(0x7f000000b580)=""/239, 0xef, 0x5}, 0xfaf}, {{0x0, 0x0, &(0x7f000000da00)=[{&(0x7f000000b680)=""/4096, 0x1000}, {&(0x7f000000c680)=""/134, 0x86}, {&(0x7f000000c740)=""/202, 0xca}, {&(0x7f000000c840)=""/4096, 0x1000}, {&(0x7f000000d840)=""/84, 0x54}, {&(0x7f000000d8c0)=""/175, 0xaf}, {&(0x7f000000d980)=""/65, 0x41}], 0x7, &(0x7f000000da80)=""/204, 0xcc, 0x1000}, 0x3880}], 0x6, 0x1, &(0x7f000000dd00)) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f000000dd40)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f000000dd80)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000ddc0)={'bcsf0\x00', 0x0}) getpeername$packet(r1, &(0x7f000000de00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f000000de40)=0x14) getpeername$packet(r1, &(0x7f000000e500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f000000e540)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000e7c0)={0x0, @empty, @loopback}, &(0x7f000000e800)=0xc) accept4$packet(r0, &(0x7f000000ec40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f000000ec80)=0x14, 0x800) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f000000f300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000f2c0)={&(0x7f000000ecc0)={0x5cc, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x240, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xc22f}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x1d, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0xfffffffffffffd65, 0x1, r7}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfc6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xd1}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x2a4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1f}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x23}}}, {0xffffffffffffff8c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4c, 0x4, [{0x3ff, 0xfffffffffffffffb, 0x0, 0x9}, {0x2, 0x6, 0x7fffffff, 0x4}, {0xf60, 0x6, 0x8001, 0x6f4b}, {0x7, 0x9, 0x4, 0xdd2}, {0x7, 0x20, 0x1, 0xd9a}, {0xa6, 0x0, 0x7, 0x7}, {0x9, 0x3ff, 0x2, 0x3}, {0x3, 0x925, 0x5, 0x8001}, {0x1, 0x1, 0x7, 0x1}]}}}, {0x2f, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xbaa8}}}]}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x4004000}, 0x40001) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 425.487235] FAULT_INJECTION: forcing a failure. [ 425.487235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.499249] CPU: 0 PID: 21659 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 425.506195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.516011] Call Trace: [ 425.518651] dump_stack+0x185/0x1d0 [ 425.522323] should_fail+0x87b/0xab0 [ 425.526093] __alloc_pages_nodemask+0x600/0x5cc0 [ 425.530917] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.535809] ? __msan_poison_alloca+0x15c/0x1d0 [ 425.540514] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.545143] netlink: 'syz-executor1': attribute type 21 has an invalid length. [ 425.545391] ? __msan_poison_alloca+0x15c/0x1d0 [ 425.557430] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 425.562824] ? cap_capable+0x222/0x350 [ 425.566753] alloc_pages_current+0x6b1/0x970 [ 425.571225] sg_build_indirect+0x4ee/0xc90 [ 425.575536] sg_common_write+0x2260/0x3ad0 [ 425.579823] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.584729] sg_write+0x14d9/0x15b0 [ 425.588429] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.593317] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.598203] ? __msan_poison_alloca+0x15c/0x1d0 [ 425.602930] ? vfs_write+0x467/0x8c0 [ 425.604624] netlink: 'syz-executor1': attribute type 21 has an invalid length. [ 425.606699] ? __vfs_write+0xc9/0x9f0 [ 425.606745] ? vfs_write+0x467/0x8c0 [ 425.606785] ? sg_read+0x3420/0x3420 [ 425.606823] ? sg_read+0x3420/0x3420 [ 425.606850] __vfs_write+0x1aa/0x9f0 [ 425.606911] vfs_write+0x467/0x8c0 [ 425.636482] __x64_sys_write+0x1bf/0x3e0 [ 425.640682] ? ksys_write+0x360/0x360 [ 425.644516] do_syscall_64+0x15b/0x230 [ 425.648449] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 425.653663] RIP: 0033:0x455ab9 [ 425.656869] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 425.664613] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 425.671902] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 425.679195] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 425.686488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 425.693780] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000000a 23:29:20 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x17e}], 0x1}, 0x0) 23:29:20 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) prctl$setmm(0x23, 0x8007, &(0x7f0000764000/0x2000)=nil) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:20 executing program 4: mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:20 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x80) bind$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:20 executing program 1: eventfd(0xf8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:20 executing program 5 (fault-call:1 fault-nth:11): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 425.812557] FAULT_INJECTION: forcing a failure. [ 425.812557] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.824423] CPU: 0 PID: 21668 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 425.831344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.840695] Call Trace: [ 425.843291] dump_stack+0x185/0x1d0 [ 425.846952] should_fail+0x87b/0xab0 [ 425.850676] __alloc_pages_nodemask+0x600/0x5cc0 [ 425.855439] ? kernel_poison_pages+0x1a0/0x360 [ 425.860029] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 425.865482] ? get_page_from_freelist+0xacd1/0xb7b0 [ 425.870503] ? kernel_text_address+0x34d/0x3a0 [ 425.875104] ? __kernel_text_address+0x34/0xe0 [ 425.879694] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 425.885159] kmsan_internal_alloc_meta_for_pages+0x8d/0x710 [ 425.890871] ? is_bpf_text_address+0xb4/0x4b0 [ 425.895375] ? __kernel_text_address+0x34/0xe0 [ 425.899980] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.904833] kmsan_alloc_page+0x87/0xe0 [ 425.908831] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 425.913592] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.918440] ? __msan_poison_alloca+0x15c/0x1d0 [ 425.923197] ? __kmalloc+0x2d8/0x350 [ 425.926909] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.931751] ? __msan_poison_alloca+0x15c/0x1d0 [ 425.936428] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 425.941789] ? cap_capable+0x222/0x350 [ 425.945684] alloc_pages_current+0x6b1/0x970 [ 425.950100] sg_build_indirect+0x4ee/0xc90 [ 425.954343] sg_common_write+0x2260/0x3ad0 [ 425.958671] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.963526] sg_write+0x14d9/0x15b0 [ 425.967163] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.972015] ? kmsan_set_origin_inline+0x6b/0x120 [ 425.976862] ? __msan_poison_alloca+0x15c/0x1d0 [ 425.981537] ? vfs_write+0x467/0x8c0 [ 425.985253] ? __vfs_write+0xc9/0x9f0 [ 425.989055] ? vfs_write+0x467/0x8c0 [ 425.992770] ? sg_read+0x3420/0x3420 [ 425.996480] ? sg_read+0x3420/0x3420 [ 426.000198] __vfs_write+0x1aa/0x9f0 [ 426.003942] vfs_write+0x467/0x8c0 [ 426.007508] __x64_sys_write+0x1bf/0x3e0 [ 426.011574] ? ksys_write+0x360/0x360 [ 426.015372] do_syscall_64+0x15b/0x230 [ 426.019265] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 426.024446] RIP: 0033:0x455ab9 [ 426.027628] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 426.035353] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 426.042623] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 426.049887] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 23:29:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280)=0x800000000007, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = dup(r1) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000200)={0x1, &(0x7f0000001ac0)=[{0x0, 0x0, 0x0, @link_local}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) io_setup(0x8001, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_ifreq(r4, 0x8943, &(0x7f0000000380)={'syz_tun\x00', @ifru_names='rose0\x00'}) io_destroy(r3) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x800) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000002c0)=0x202, 0x4) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) ftruncate(r5, 0x80080) sendfile(r2, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) 23:29:21 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x80, 0x240) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) 23:29:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 426.057152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 426.064419] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000000b 23:29:21 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80800) accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80, 0x80000) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000000000000005efd6c1f2735ec8d030000000000000000000000000000000000000038000000000000000000"], 0x40) pipe2(&(0x7f0000000100), 0x80800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000040)) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0xfffffffffffffff7, 0x800) 23:29:21 executing program 5 (fault-call:1 fault-nth:12): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 426.292425] FAULT_INJECTION: forcing a failure. [ 426.292425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 426.304275] CPU: 0 PID: 21699 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 426.311195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.320546] Call Trace: [ 426.323148] dump_stack+0x185/0x1d0 [ 426.326786] should_fail+0x87b/0xab0 [ 426.330508] __alloc_pages_nodemask+0x600/0x5cc0 [ 426.335270] ? kernel_poison_pages+0x1a0/0x360 [ 426.339858] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 426.345308] ? get_page_from_freelist+0xacd1/0xb7b0 [ 426.350356] ? kernel_text_address+0x34d/0x3a0 [ 426.354941] ? __kernel_text_address+0x34/0xe0 [ 426.359532] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 426.364996] kmsan_internal_alloc_meta_for_pages+0x105/0x710 [ 426.370802] ? is_bpf_text_address+0xb4/0x4b0 [ 426.375308] ? __kernel_text_address+0x34/0xe0 [ 426.379895] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.384757] kmsan_alloc_page+0x87/0xe0 [ 426.388738] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 426.393501] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.398352] ? __msan_poison_alloca+0x15c/0x1d0 [ 426.403027] ? __kmalloc+0x2d8/0x350 [ 426.406749] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.411632] ? __msan_poison_alloca+0x15c/0x1d0 [ 426.416337] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 426.421701] ? cap_capable+0x222/0x350 [ 426.425594] alloc_pages_current+0x6b1/0x970 [ 426.430023] sg_build_indirect+0x4ee/0xc90 [ 426.434268] sg_common_write+0x2260/0x3ad0 [ 426.438508] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.443364] sg_write+0x14d9/0x15b0 [ 426.447006] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.451852] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.456698] ? __msan_poison_alloca+0x15c/0x1d0 [ 426.461372] ? vfs_write+0x467/0x8c0 [ 426.465093] ? __vfs_write+0xc9/0x9f0 [ 426.468890] ? vfs_write+0x467/0x8c0 [ 426.472605] ? sg_read+0x3420/0x3420 [ 426.476314] ? sg_read+0x3420/0x3420 [ 426.480037] __vfs_write+0x1aa/0x9f0 [ 426.483761] vfs_write+0x467/0x8c0 [ 426.487307] __x64_sys_write+0x1bf/0x3e0 [ 426.491372] ? ksys_write+0x360/0x360 [ 426.495176] do_syscall_64+0x15b/0x230 [ 426.499070] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 426.504255] RIP: 0033:0x455ab9 [ 426.507438] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 426.515146] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 426.522412] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 426.529773] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 23:29:21 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xe4, 0x600000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000140)=0xe8) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) getpriority(0x2, r1) 23:29:21 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f00005c4000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000841000/0x1000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000200000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x18040, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x10000, 0x10001, 0x6, 0x3, [], [], [], 0x400, 0xff80000000000000, 0x401, 0x7, "b08ae89869cf82394520fa6f6a79ca9b"}) [ 426.537043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 426.544308] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000000c 23:29:21 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x181}], 0x1}, 0x0) 23:29:21 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpgrp(r0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) accept$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) 23:29:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:21 executing program 5 (fault-call:1 fault-nth:13): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xfffffffffffff4a8) 23:29:21 executing program 6: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$inet6_udp_int(r0, 0x11, 0x6a, &(0x7f0000000000), 0xfffffffffffffe52) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x1, 0x3, 0x6, 0x3, 0x1}}) 23:29:21 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x1b, 0x5, 0x488, 0x1c0, 0x1c0, 0xffffffff, 0x320, 0x1c0, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, &(0x7f0000000040), {[{{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff000000, 0xff000000, 'bond0\x00', 'vlan0\x00', {}, {0xff}, 0x62, 0x1, 0x52}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @empty, @multicast1=0xe0000001, @port=0x4e23, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast1=0xe0000001, @broadcast=0xffffffff, @port=0x4e23, @icmp_id=0x67}}}}, {{@ip={@multicast2=0xe0000002, @broadcast=0xffffffff, 0x0, 0xffffffff, 'erspan0\x00', 'lo\x00', {}, {0xff}, 0xad, 0x2, 0x4}, 0x0, 0x128, 0x160, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x0, 0xf, 0x1, 0x1}}, @common=@set={0x40, 'set\x00', 0x0, {{0x8, [0x0, 0x7, 0x9, 0x80, 0x200, 0xffff], 0x8, 0x9, 0x8}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x3, @rand_addr=0x80000001, @broadcast=0xffffffff, @port=0x4e20, @icmp_id=0x67}}}}, {{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}, 0xff0000ff, 0x0, 'bond_slave_0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x77754d5e67673fa5, 0x1}, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, @gre_key=0x10000, @port=0x4e21}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e8) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 426.819124] sg_write: 34 callbacks suppressed [ 426.819148] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 426.819148] program syz-executor2 not setting count and/or reply_len properly [ 426.840628] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 426.840628] program syz-executor5 not setting count and/or reply_len properly [ 426.859602] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 426.859602] program syz-executor3 not setting count and/or reply_len properly [ 426.868618] FAULT_INJECTION: forcing a failure. [ 426.868618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 426.887536] CPU: 0 PID: 21727 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 426.894481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.903847] Call Trace: [ 426.906479] dump_stack+0x185/0x1d0 [ 426.910174] should_fail+0x87b/0xab0 [ 426.913934] __alloc_pages_nodemask+0x600/0x5cc0 [ 426.918755] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.923629] ? __msan_poison_alloca+0x15c/0x1d0 [ 426.928330] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.933223] ? __msan_poison_alloca+0x15c/0x1d0 [ 426.937934] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 426.943345] ? cap_capable+0x222/0x350 [ 426.947294] alloc_pages_current+0x6b1/0x970 [ 426.951757] sg_build_indirect+0x4ee/0xc90 [ 426.956040] sg_common_write+0x2260/0x3ad0 [ 426.960340] sg_write+0x14d9/0x15b0 [ 426.964047] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.968940] ? kmsan_set_origin_inline+0x6b/0x120 [ 426.973833] ? __msan_poison_alloca+0x15c/0x1d0 [ 426.978556] ? vfs_write+0x467/0x8c0 [ 426.982323] ? __vfs_write+0xc9/0x9f0 [ 426.986170] ? vfs_write+0x467/0x8c0 [ 426.989933] ? sg_read+0x3420/0x3420 [ 426.993680] ? sg_read+0x3420/0x3420 [ 426.997416] __vfs_write+0x1aa/0x9f0 [ 427.001193] vfs_write+0x467/0x8c0 [ 427.002934] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 427.002934] program syz-executor2 not setting count and/or reply_len properly [ 427.004798] __x64_sys_write+0x1bf/0x3e0 [ 427.004860] ? ksys_write+0x360/0x360 [ 427.028150] do_syscall_64+0x15b/0x230 [ 427.032082] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 427.037295] RIP: 0033:0x455ab9 [ 427.040502] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.048244] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 427.055530] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 427.062846] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 427.070132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 427.077436] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000000d [ 427.138620] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 427.138620] program syz-executor0 not setting count and/or reply_len properly 23:29:22 executing program 0: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) getpgrp(r0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80, 0x0) accept$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) 23:29:22 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000001c0)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40000, 0x0) ioctl(r1, 0x1ff, &(0x7f00000000c0)="ae6a84f9c2ea8dc1c952470cfb63de57a4df7d755a56451a321d1dd181d30ff794bca34dcfde4b99582f03b1f72bdab4213e2c816c2b85394e2f246bd20190cae3a664f79bc3383258820aac5b1d11ac96497cb6e1399fd7c0ccffdce02ea69a483140a300973ba8306168ff9d1515752df0e64278ecb2822dad5dc5554889bbfb900b6d8dbeea684870c8a59f7031d7b22b545807c7b92f4e47df91d7356a35f58aebfb5ecbd456a2c2a4c41a05d34507a2bd2e5d1cb5298a1125d6e12d8c120b2c02bb2baa313f256ab2c756824735169c6864080a582ee447fed96330c57c75ccf2534e36dd95410183c426593e6a22b81b") r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40001, 0x10) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fed000/0x12000)=nil, 0x12000}, 0x2}) 23:29:22 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xa, 0x800) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000000000000000000000000df3300000000000000000000000000000000000000000038000000000000000000"], 0x40) sync_file_range(r2, 0x1, 0x4, 0x6) 23:29:22 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)=@random={'user.', '\x00'}, &(0x7f0000000200)="6367726f75701de9616e31776c616e317b902d5c2a6367726f75707b00", 0x1d, 0x2) fadvise64(r0, 0x1e, 0xffffffffffffffc0, 0x3) mremap(&(0x7f00006b8000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:22 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) fgetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='seclo]\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)=""/141, 0x8d) mremap(&(0x7f0000ed7000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f47767") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:22 executing program 5 (fault-call:1 fault-nth:14): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 427.385736] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 427.385736] program syz-executor2 not setting count and/or reply_len properly [ 427.404895] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 427.404895] program syz-executor5 not setting count and/or reply_len properly [ 427.447537] sg_write: data in/out 2098/746 bytes for SCSI command 0x0-- guessing data in; [ 427.447537] program syz-executor3 not setting count and/or reply_len properly [ 427.477586] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 427.477586] program syz-executor2 not setting count and/or reply_len properly [ 427.496488] FAULT_INJECTION: forcing a failure. [ 427.496488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.508316] CPU: 1 PID: 21747 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 427.515255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.524601] Call Trace: [ 427.527193] dump_stack+0x185/0x1d0 [ 427.530829] should_fail+0x87b/0xab0 [ 427.534551] __alloc_pages_nodemask+0x600/0x5cc0 [ 427.539314] ? kernel_poison_pages+0x1a0/0x360 [ 427.543898] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 427.549356] ? get_page_from_freelist+0xacd1/0xb7b0 [ 427.554371] ? kernel_text_address+0x34d/0x3a0 [ 427.558975] ? kmsan_set_origin_inline+0x6b/0x120 [ 427.563835] kmsan_internal_alloc_meta_for_pages+0x8d/0x710 [ 427.569551] ? is_console_locked+0x29/0x50 [ 427.573786] ? kmsan_report+0x4f/0x2a0 [ 427.577677] ? __msan_warning_32+0x70/0xc0 [ 427.581908] ? kmsan_set_origin_inline+0x6b/0x120 [ 427.586749] kmsan_alloc_page+0x87/0xe0 [ 427.590723] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 427.595488] ? kmsan_set_origin_inline+0x6b/0x120 [ 427.600339] ? __msan_poison_alloca+0x15c/0x1d0 [ 427.605009] ? __kmalloc+0x2d8/0x350 [ 427.608724] ? kmsan_set_origin_inline+0x6b/0x120 [ 427.613569] ? __msan_poison_alloca+0x15c/0x1d0 [ 427.618245] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 427.623605] ? cap_capable+0x222/0x350 [ 427.627501] alloc_pages_current+0x6b1/0x970 [ 427.632004] sg_build_indirect+0x4ee/0xc90 [ 427.636249] sg_common_write+0x2260/0x3ad0 [ 427.640500] sg_write+0x14d9/0x15b0 23:29:22 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4656000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000cfa7"], 0x40) [ 427.644144] ? kmsan_set_origin_inline+0x6b/0x120 [ 427.648991] ? kmsan_set_origin_inline+0x6b/0x120 [ 427.653830] ? __msan_poison_alloca+0x15c/0x1d0 [ 427.658530] ? vfs_write+0x467/0x8c0 [ 427.662245] ? __vfs_write+0xc9/0x9f0 [ 427.666046] ? vfs_write+0x467/0x8c0 [ 427.669766] ? sg_read+0x3420/0x3420 [ 427.673478] ? sg_read+0x3420/0x3420 [ 427.677199] __vfs_write+0x1aa/0x9f0 [ 427.680920] vfs_write+0x467/0x8c0 [ 427.684462] __x64_sys_write+0x1bf/0x3e0 [ 427.688533] ? ksys_write+0x360/0x360 [ 427.692334] do_syscall_64+0x15b/0x230 [ 427.694300] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 427.694300] program syz-executor2 not setting count and/or reply_len properly [ 427.696227] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 427.696237] RIP: 0033:0x455ab9 [ 427.696244] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.696259] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 427.696266] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 427.696273] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 427.696280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 427.696287] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000000e 23:29:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/180, 0xb4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000440)=""/17) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000100)="e0dc9f854643a2b058b16f5d204fd3473cfaa6db1b98179ead5ade86cb3f99cc9db2e6f5a65706e9a644615a4674ac706ffcf36013163fffef84f79b0be22e740f4ba628eb3fcb", 0x47}, {&(0x7f0000000180)="19baeca70614c6993293a172e5d929f29e30ca3d420e1e174f9dbf4dcd331d3c13dd0446b437822ddd39b7079b60cbfda2c1b7d1c2a59bef38dc80baef92f66357fada12a04a583f25bc0468f891d64ee8568f2cf95b28dd3ea08b777b144d3c6ac92a9275a5ea6e35ef86bc3528de05fdfcf1c95acea61a25b2858461d89254638116d825f3029a5f680dadc655d56a962a545039273a41d3045c57235177e995857e2d63531763a0e726052164bb59f94d82f3ed13c976f85631a2fd6f14d1b81f33a39d14801d4573b46f4029aa44f6fbca0ef2617016", 0xd8}, {&(0x7f0000000280)="41cf706d6130e3c5eafea2612112d7ed8165ed3bf99710c85a1d31026e39c244ff5b77f497a4cf026df6622749a62d6978a9be4fc36394bd08bb8552ad1fc83544999dc08e4b31cab13669c7476d477409914e5efd01e277d5a00aed6adab0e7e51224ad0d62471f77990a627c5cbc38b860e8952d3e94979edaaadcf289a18dbba27e0d07043fce990719abde558b9c65e0bf05cf48cc7636b8515f0d33defe94262d670091315254f891", 0xab}, {&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000000440)}, {&(0x7f0000000480)="96053086f865a353e923179d2c0436d1e2bf33efb02f6481ba611dbffc396f61616c25ba89e783339c80510e95cc9065de705752d1ebce4d402ab64fc204c92c540fe4a5676f97cde72b0c58a3606860437a916d6517500ab4839775dd14092a2c76fe309ee929f65263ab6d", 0x6c}, {&(0x7f0000000500)="e770741d867e0273e0ae9d6295fa6d49d685f62a3de8a1596e5e71b47a80416181797dd7d68df78b6805a954cc638cc74c9afa21f0", 0x35}], 0x7, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:22 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x181}], 0x1}, 0x0) 23:29:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x121000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000340)={0x5, 0x7fffffff, 0x3, 0x8, 0x2, 0x100000000, 0x7, 0x0, 0x0}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e24, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}, 0xc85, 0xa94, 0x1f, 0x20, 0x11}, &(0x7f0000000480)=0x98) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f00000004c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000500)={r0, 0x0, 0x8001, 0x8, 0xee}) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x4, 0xb299, 0x4}, &(0x7f0000000280)=0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r4, 0x300, 0x70bd25, 0x25dfdbfd, {0xb}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xeb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x48084) 23:29:22 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc)=0x100000000, 0x4) recvmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000640)=""/4, 0x4}], 0x8, &(0x7f0000000700)=""/192, 0xc0, 0x9}, 0x20) mremap(&(0x7f0000e70000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) fchdir(r0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:22 executing program 5 (fault-call:1 fault-nth:15): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f47767") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:22 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ea8000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 23:29:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0xf32, 0x1) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) write$binfmt_elf64(r0, &(0x7f0000002400)=ANY=[], 0xffffffffffffffec) [ 427.961202] FAULT_INJECTION: forcing a failure. [ 427.961202] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.973053] CPU: 1 PID: 21779 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 427.979979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.989325] Call Trace: [ 427.991915] dump_stack+0x185/0x1d0 [ 427.995555] should_fail+0x87b/0xab0 [ 427.999277] __alloc_pages_nodemask+0x600/0x5cc0 [ 428.004045] ? kernel_poison_pages+0x1a0/0x360 23:29:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 428.008634] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 428.014087] ? get_page_from_freelist+0xacd1/0xb7b0 [ 428.019104] ? kernel_text_address+0x34d/0x3a0 [ 428.023690] ? __kernel_text_address+0x34/0xe0 [ 428.028278] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 428.033740] kmsan_internal_alloc_meta_for_pages+0x105/0x710 [ 428.039540] ? is_bpf_text_address+0xb4/0x4b0 [ 428.044044] ? __kernel_text_address+0x34/0xe0 [ 428.048635] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.053483] kmsan_alloc_page+0x87/0xe0 23:29:23 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x333) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 428.057552] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 428.062319] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.067161] ? __msan_poison_alloca+0x15c/0x1d0 [ 428.071827] ? __kmalloc+0x2d8/0x350 [ 428.075548] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.080396] ? __msan_poison_alloca+0x15c/0x1d0 [ 428.085071] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 428.090435] ? cap_capable+0x222/0x350 [ 428.094327] alloc_pages_current+0x6b1/0x970 [ 428.098746] sg_build_indirect+0x4ee/0xc90 [ 428.102988] sg_common_write+0x2260/0x3ad0 [ 428.107225] ? kmsan_set_origin_inline+0x6b/0x120 23:29:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 428.112086] sg_write+0x14d9/0x15b0 [ 428.115730] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.120608] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.125453] ? __msan_poison_alloca+0x15c/0x1d0 [ 428.130126] ? vfs_write+0x467/0x8c0 [ 428.133845] ? __vfs_write+0xc9/0x9f0 [ 428.137648] ? vfs_write+0x467/0x8c0 [ 428.141359] ? sg_read+0x3420/0x3420 [ 428.145070] ? sg_read+0x3420/0x3420 [ 428.148790] __vfs_write+0x1aa/0x9f0 [ 428.152515] vfs_write+0x467/0x8c0 [ 428.156063] __x64_sys_write+0x1bf/0x3e0 [ 428.160131] ? ksys_write+0x360/0x360 [ 428.163931] do_syscall_64+0x15b/0x230 [ 428.167838] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 428.173023] RIP: 0033:0x455ab9 [ 428.176232] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.183941] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 428.191207] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 428.198473] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 23:29:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f47767") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:23 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x3f, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x4, {{0x2, 0x4e24, @rand_addr=0x7}}}, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='\x00'}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000180)={0x200, 0x6, 0x2057a1f2, 0x8}, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f0000000080)=""/34, &(0x7f00000000c0)=0x22) [ 428.205743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 428.213005] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000000f 23:29:23 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0xffffffffffffffff, &(0x7f0000ffd000/0x2000)=nil) r0 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='\x00', 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001480)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000014c0)={0x0, 0xfffffffffffff6d6, 0x10}, &(0x7f0000001500)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r2}, 0x8) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) 23:29:23 executing program 5 (fault-call:1 fault-nth:16): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:23 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 428.390983] FAULT_INJECTION: forcing a failure. [ 428.390983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.402934] CPU: 1 PID: 21803 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 428.409881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.419256] Call Trace: [ 428.421896] dump_stack+0x185/0x1d0 [ 428.425597] should_fail+0x87b/0xab0 [ 428.429363] __alloc_pages_nodemask+0x600/0x5cc0 [ 428.434192] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.439085] ? __msan_poison_alloca+0x15c/0x1d0 [ 428.443799] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.448679] ? __msan_poison_alloca+0x15c/0x1d0 [ 428.453409] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 428.458803] ? cap_capable+0x222/0x350 [ 428.462734] alloc_pages_current+0x6b1/0x970 [ 428.467202] sg_build_indirect+0x4ee/0xc90 [ 428.471486] sg_common_write+0x2260/0x3ad0 [ 428.475773] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.480673] sg_write+0x14d9/0x15b0 [ 428.484366] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.489288] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.494213] ? __msan_poison_alloca+0x15c/0x1d0 [ 428.498958] ? vfs_write+0x467/0x8c0 [ 428.502730] ? __vfs_write+0xc9/0x9f0 [ 428.506578] ? vfs_write+0x467/0x8c0 [ 428.510334] ? sg_read+0x3420/0x3420 [ 428.514084] ? sg_read+0x3420/0x3420 [ 428.517836] __vfs_write+0x1aa/0x9f0 [ 428.521619] vfs_write+0x467/0x8c0 [ 428.525224] __x64_sys_write+0x1bf/0x3e0 [ 428.529324] ? ksys_write+0x360/0x360 [ 428.533155] do_syscall_64+0x15b/0x230 [ 428.537090] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 428.542299] RIP: 0033:0x455ab9 [ 428.545523] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 428.553264] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 428.560577] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 428.567870] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 428.575162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 428.582451] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000010 23:29:23 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc)=0x100000000, 0x4) recvmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/158, 0x9e}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000640)=""/4, 0x4}], 0x8, &(0x7f0000000700)=""/192, 0xc0, 0x9}, 0x20) mremap(&(0x7f0000e70000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) fchdir(r0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:23 executing program 5 (fault-call:1 fault-nth:17): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xe05, 0x2040) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x200000) getsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f0000000100)=""/49, &(0x7f0000000140)=0x31) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000080)={{0x7f, 0xea14}, {0x7, 0x5}, 0x100000000, 0x0, 0xffffffffffffffff}) 23:29:23 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x4) madvise(&(0x7f00004a5000/0x3000)=nil, 0x3000, 0xc) 23:29:23 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) shmget(0x1, 0x3000, 0x54001902, &(0x7f000057e000/0x3000)=nil) mlock2(&(0x7f00005ac000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = semget$private(0x0, 0x3, 0x3) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000000)=""/65) 23:29:23 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000f1f000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000e20000/0x4000)=nil) madvise(&(0x7f00006ba000/0x2000)=nil, 0x2000, 0xc) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2280, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/133) 23:29:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f4776710") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:23 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x181}], 0x1}, 0x0) [ 428.833141] FAULT_INJECTION: forcing a failure. [ 428.833141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.844994] CPU: 1 PID: 21825 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 428.851919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.861268] Call Trace: [ 428.863866] dump_stack+0x185/0x1d0 [ 428.867501] should_fail+0x87b/0xab0 [ 428.871231] __alloc_pages_nodemask+0x600/0x5cc0 [ 428.876011] ? kernel_poison_pages+0x1a0/0x360 [ 428.880597] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 428.886047] ? get_page_from_freelist+0xacd1/0xb7b0 [ 428.891070] ? kernel_text_address+0x34d/0x3a0 [ 428.895657] ? __kernel_text_address+0x34/0xe0 [ 428.900239] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 428.905704] kmsan_internal_alloc_meta_for_pages+0x8d/0x710 [ 428.911417] ? is_bpf_text_address+0xb4/0x4b0 [ 428.915919] ? __kernel_text_address+0x34/0xe0 [ 428.920502] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.925359] kmsan_alloc_page+0x87/0xe0 23:29:23 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000735000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000fbe000/0x1000)=nil) mremap(&(0x7f0000ee7000/0x2000)=nil, 0x2000, 0x3000, 0x8000000000002, &(0x7f000053a000/0x3000)=nil) madvise(&(0x7f0000826000/0x3000)=nil, 0x3000, 0x8) [ 428.929338] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 428.934097] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.938945] ? __msan_poison_alloca+0x15c/0x1d0 [ 428.943613] ? __kmalloc+0x2d8/0x350 [ 428.947328] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.952173] ? __msan_poison_alloca+0x15c/0x1d0 [ 428.956843] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 428.962222] ? cap_capable+0x222/0x350 [ 428.966126] alloc_pages_current+0x6b1/0x970 [ 428.970543] sg_build_indirect+0x4ee/0xc90 [ 428.974786] sg_common_write+0x2260/0x3ad0 [ 428.979026] ? kmsan_set_origin_inline+0x6b/0x120 23:29:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f4776710") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 428.983884] sg_write+0x14d9/0x15b0 [ 428.987529] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.992372] ? kmsan_set_origin_inline+0x6b/0x120 [ 428.997218] ? __msan_poison_alloca+0x15c/0x1d0 [ 429.001888] ? vfs_write+0x467/0x8c0 [ 429.005610] ? __vfs_write+0xc9/0x9f0 [ 429.009409] ? vfs_write+0x467/0x8c0 [ 429.013119] ? sg_read+0x3420/0x3420 [ 429.016922] ? sg_read+0x3420/0x3420 [ 429.020640] __vfs_write+0x1aa/0x9f0 [ 429.024373] vfs_write+0x467/0x8c0 [ 429.027921] __x64_sys_write+0x1bf/0x3e0 23:29:24 executing program 0 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 429.031985] ? ksys_write+0x360/0x360 [ 429.035784] do_syscall_64+0x15b/0x230 [ 429.039675] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 429.044860] RIP: 0033:0x455ab9 [ 429.048050] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.055757] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 429.063024] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 429.070385] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 23:29:24 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = memfd_create(&(0x7f00000001c0)='*-[#(\x00', 0x3) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = getpgrp(0xffffffffffffffff) migrate_pages(r1, 0x209, &(0x7f0000000000)=0x100000000, &(0x7f0000000040)=0x1001) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 429.077655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 429.084921] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000011 23:29:24 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000f8e000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mremap(&(0x7f00006a0000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000f12000/0x3000)=nil) socketpair$inet6(0xa, 0x800, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c) 23:29:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x27, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:24 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = userfaultfd(0x800) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000e6e000/0x1000)=nil, 0x1000}) socket$inet6_udp(0xa, 0x2, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x10000, 0x100000001, 0x4, 0x8, 0x7deb, 0x3000000, 0x100, 0x7ff, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x6, 0x30}, &(0x7f0000000140)=0xc) 23:29:24 executing program 5 (fault-call:1 fault-nth:18): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f4776710") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 429.304114] FAULT_INJECTION: forcing a failure. [ 429.304114] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.316051] CPU: 0 PID: 21849 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 429.323001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.332366] Call Trace: [ 429.334957] dump_stack+0x185/0x1d0 [ 429.338588] should_fail+0x87b/0xab0 [ 429.342309] __alloc_pages_nodemask+0x600/0x5cc0 [ 429.347070] ? __msan_get_context_state+0x93/0xf0 [ 429.351914] ? kernel_poison_pages+0x1a0/0x360 [ 429.356497] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 429.361946] ? get_page_from_freelist+0xacd1/0xb7b0 [ 429.366961] ? kernel_text_address+0x34d/0x3a0 [ 429.371544] ? __kernel_text_address+0x34/0xe0 [ 429.376129] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 429.381594] kmsan_internal_alloc_meta_for_pages+0x105/0x710 [ 429.387397] ? is_bpf_text_address+0xb4/0x4b0 [ 429.391901] ? __kernel_text_address+0x34/0xe0 [ 429.396485] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.401339] kmsan_alloc_page+0x87/0xe0 [ 429.405321] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 429.410088] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.415024] ? __msan_poison_alloca+0x15c/0x1d0 [ 429.419698] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.424541] ? __msan_poison_alloca+0x15c/0x1d0 [ 429.429216] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 429.434584] ? cap_capable+0x222/0x350 [ 429.438477] alloc_pages_current+0x6b1/0x970 [ 429.442889] sg_build_indirect+0x4ee/0xc90 [ 429.447158] sg_common_write+0x2260/0x3ad0 [ 429.451421] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.456273] sg_write+0x14d9/0x15b0 [ 429.459905] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.464747] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.469587] ? __msan_poison_alloca+0x15c/0x1d0 [ 429.474255] ? vfs_write+0x467/0x8c0 [ 429.477970] ? __vfs_write+0xc9/0x9f0 [ 429.481775] ? vfs_write+0x467/0x8c0 [ 429.485487] ? sg_read+0x3420/0x3420 [ 429.489199] ? sg_read+0x3420/0x3420 [ 429.492916] __vfs_write+0x1aa/0x9f0 [ 429.496639] vfs_write+0x467/0x8c0 [ 429.500192] __x64_sys_write+0x1bf/0x3e0 [ 429.504240] ? ksys_write+0x360/0x360 [ 429.508038] do_syscall_64+0x15b/0x230 [ 429.511922] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 429.517101] RIP: 0033:0x455ab9 [ 429.520284] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 429.527971] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 429.535219] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 429.542469] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 429.549726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 429.556996] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000012 23:29:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:24 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x183}], 0x1}, 0x0) 23:29:24 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80, 0x9d) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0xfffffffffffffedf) r3 = socket$unix(0x1, 0x2, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x0, "e91f7189591e9233614b00"}, 0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback=0x7f000001, @in6=@dev={0xfe, 0x80, [], 0x11}, 0x4e21, 0x80000001, 0x4e24, 0x8, 0xa, 0x0, 0x80, 0x3f, r2, r4}, {0x8, 0x3ff, 0x1, 0xc9b3, 0x7, 0x7, 0x6, 0x7b48b688}, {0x0, 0x7f, 0x5, 0x80000001}, 0x100000000, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d2, 0x7f}, 0xa, @in=@rand_addr=0xff, 0x3502, 0x61549d5046500cbf, 0x0, 0x3f, 0x100000001, 0x5, 0x9}}, 0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e21, @rand_addr=0x7}}, 0xfff, 0xd2, 0x9, "c2aaa767f49b1ae5802f5c2839e5878cb50c4425f2c7192036eced682079df371a309582ce701a2f974851ca0ec34726f1de5d496293759a5473347f48179835c1e94b221f80cc9f7595f3c2544d1697"}, 0xd8) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x40) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2d00000062d588aab0384d5188685a34e1c8aad2cb1f6e08782109000000560efb7d8b92c0ba559e39465378f3447681a20a51eaeeb69ccb72cf43e1c6f5a34eba80549865edfa8344e32dbc530053a7d4d7347513b512ef8f1c9e0ae63a47f02cc362f086746810242db104cfc691944cf9c55a24fae4f504792e33943836fab726035cbe9c5684b2340689efb82b1395c2328dbc5d36a7"], &(0x7f0000000080)=0x35) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x0, 0x3, 0x80000001}, 0x10) setsockopt(r1, 0x5, 0x4, &(0x7f00000006c0)="2d3b76ccc9558594c80ef7d3fc94eafba382a651a331b7f5db8bc9621b801b478e3c832655c92ae9216696d96aa0c56434ffdc350e2609485f1ebc02408644941e08497398dd25fe7b49d8e01a22667c5896542da581dfd94a91e750223a6838115ac257dfc0883735a08d243c75995d8353ed263cfe4db7c8472e66900f3877ce9bfda39605575685b50b2feb86e3e22d5d75d20a092a54ef85387e7a13264a6f455a77cbac2cbe0f666016c0052c433f8bbf2beefe042a390f202026dda3c10d9ef9ae5577cf95", 0xc8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000003c0)={0x80010000000000, 0x800000000000, 0x9, 'queue1\x00', 0x4}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) pipe(&(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f054c46560000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)) 23:29:24 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = dup(0xffffffffffffff9c) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:24 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x82000, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:24 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) 23:29:24 executing program 5 (fault-call:1 fault-nth:19): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 429.836577] program syz-executor2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.878678] FAULT_INJECTION: forcing a failure. [ 429.878678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 429.890721] CPU: 1 PID: 21871 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 429.897698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.907075] Call Trace: [ 429.908480] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 429.910136] dump_stack+0x185/0x1d0 [ 429.910197] should_fail+0x87b/0xab0 [ 429.910242] __alloc_pages_nodemask+0x600/0x5cc0 [ 429.918331] Unknown ioctl 1074013192 [ 429.921512] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.921562] ? __msan_poison_alloca+0x15c/0x1d0 [ 429.921606] ? __kmalloc+0x2d8/0x350 [ 429.921643] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.942486] program syz-executor2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.943334] ? __msan_poison_alloca+0x15c/0x1d0 [ 429.943370] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 429.943398] ? cap_capable+0x222/0x350 [ 429.943441] alloc_pages_current+0x6b1/0x970 [ 429.943490] sg_build_indirect+0x4ee/0xc90 [ 429.943536] sg_common_write+0x2260/0x3ad0 [ 429.956326] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 429.960846] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.960908] sg_write+0x14d9/0x15b0 [ 429.960972] ? kmsan_set_origin_inline+0x6b/0x120 [ 429.961022] ? kmsan_set_origin_inline+0x6b/0x120 [ 430.004419] Unknown ioctl 1074013192 [ 430.008823] ? __msan_poison_alloca+0x15c/0x1d0 [ 430.008874] ? vfs_write+0x467/0x8c0 [ 430.008923] ? __vfs_write+0xc9/0x9f0 23:29:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x500, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080)=0x7ff, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) [ 430.008968] ? vfs_write+0x467/0x8c0 [ 430.009000] ? sg_read+0x3420/0x3420 [ 430.009050] ? sg_read+0x3420/0x3420 [ 430.040928] __vfs_write+0x1aa/0x9f0 [ 430.044719] vfs_write+0x467/0x8c0 [ 430.048323] __x64_sys_write+0x1bf/0x3e0 [ 430.052422] ? ksys_write+0x360/0x360 [ 430.056248] do_syscall_64+0x15b/0x230 [ 430.060174] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 430.065379] RIP: 0033:0x455ab9 [ 430.068680] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 23:29:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x7, 0xc, [0x1f, 0x7f, 0x8]}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0x18) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 430.076424] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 430.083715] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 430.091024] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 430.098313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 430.105623] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000013 23:29:25 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ip6tnl0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}}) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mlock2(&(0x7f000065a000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:25 executing program 1: r0 = dup(0xffffffffffffffff) getsockname$inet(r0, &(0x7f0000000000)={0x0, 0x0, @dev}, &(0x7f0000000040)=0x10) r1 = getpgid(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000440)='net/ipx\x00') socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) epoll_create1(0x80000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f0000000280)=""/127, 0x7f, &(0x7f0000000300)=""/176, 0x3}}, 0x68) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@local, @dev, @local}, &(0x7f00000000c0)=0xc) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) syz_open_dev$rtc(&(0x7f0000000180)='/dev/rtc#\x00', 0xc39e, 0x800) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/127, 0x7f, 0x6}, 0x12020) 23:29:25 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x3, 0x30}, &(0x7f0000000180)=0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) madvise(&(0x7f00006bf000/0x4000)=nil, 0x4000, 0x64) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) mknod(&(0x7f0000000080)='./file0\x00', 0x110, 0x3) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)={0x2, "58da"}, 0x3) 23:29:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000000)={0x5, 0x7, 0xfffffffffffffffc, 0x4, '\x00', 0x200}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='\x00', r1}, 0x10) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x12000, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)="51dd77cf84b572f275736167655f7573657200", 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={r2, 0xff}, &(0x7f00000000c0)=0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x7d3, 0x2) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) write$binfmt_elf64(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x10000000000000}}, 0x40) 23:29:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:25 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x183}], 0x1}, 0x0) 23:29:25 executing program 6: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000080)) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000040)={0x10000, 0x93}) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:25 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000)=0x20000000000, 0x4) mremap(&(0x7f0000819000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006b4000/0x1000)=nil) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x7, 0x3, 0xa, 0x0, 0x0, [{r0, 0x0, 0x1}, {r0, 0x0, 0x9}, {r0}, {r0, 0x0, 0x2}, {r0, 0x0, 0x6}, {r0, 0x0, 0x9}, {r0, 0x0, 0x10001}, {r0, 0x0, 0x401}, {r0, 0x0, 0xb8}, {r1}]}) 23:29:25 executing program 5 (fault-call:1 fault-nth:20): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:25 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0xff56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:25 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffff, 0x40) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x2, 0x2) 23:29:25 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f00000003c0)=0xffffff62) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000300)={0x0, 0xbb5}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r1, 0xf4, 0x1, 0x307, 0x1000, 0x1}, 0x14) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) flistxattr(r2, &(0x7f0000000200)=""/230, 0xe6) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="da45c97f454c46560000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000"], 0x40) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xca, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e21, 0xfffffffffffff41b, @loopback={0x0, 0x1}, 0x7fffffff}], 0x58) 23:29:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) [ 431.044893] FAULT_INJECTION: forcing a failure. [ 431.044893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.056759] CPU: 0 PID: 21922 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 431.063687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.073196] Call Trace: [ 431.075801] dump_stack+0x185/0x1d0 [ 431.079442] should_fail+0x87b/0xab0 [ 431.083161] __alloc_pages_nodemask+0x600/0x5cc0 [ 431.087919] ? kernel_poison_pages+0x1a0/0x360 [ 431.092629] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 431.098081] ? get_page_from_freelist+0xacd1/0xb7b0 [ 431.103177] ? kernel_text_address+0x34d/0x3a0 [ 431.107765] ? __kernel_text_address+0x34/0xe0 [ 431.112355] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 431.117895] kmsan_internal_alloc_meta_for_pages+0x8d/0x710 [ 431.123608] ? is_bpf_text_address+0xb4/0x4b0 [ 431.128116] ? __kernel_text_address+0x34/0xe0 [ 431.132707] ? kmsan_set_origin_inline+0x6b/0x120 [ 431.137560] kmsan_alloc_page+0x87/0xe0 [ 431.141539] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 431.146303] ? kmsan_set_origin_inline+0x6b/0x120 [ 431.151173] ? __msan_poison_alloca+0x15c/0x1d0 [ 431.155844] ? __kmalloc+0x2d8/0x350 [ 431.159556] ? kmsan_set_origin_inline+0x6b/0x120 [ 431.164398] ? __msan_poison_alloca+0x15c/0x1d0 [ 431.169095] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 431.174459] ? cap_capable+0x222/0x350 [ 431.178354] alloc_pages_current+0x6b1/0x970 [ 431.182765] sg_build_indirect+0x4ee/0xc90 [ 431.187006] sg_common_write+0x2260/0x3ad0 [ 431.191251] ? kmsan_set_origin_inline+0x6b/0x120 [ 431.196102] sg_write+0x14d9/0x15b0 [ 431.199741] ? __msan_poison_alloca+0x15c/0x1d0 [ 431.204417] ? __switch_to+0x2b3/0x420 [ 431.208310] ? kmsan_set_origin_inline+0x6b/0x120 [ 431.213152] ? __msan_poison_alloca+0x15c/0x1d0 [ 431.217831] ? vfs_write+0x467/0x8c0 [ 431.221548] ? __vfs_write+0xc9/0x9f0 [ 431.225349] ? vfs_write+0x467/0x8c0 [ 431.229063] ? sg_read+0x3420/0x3420 [ 431.232775] ? sg_read+0x3420/0x3420 [ 431.236490] __vfs_write+0x1aa/0x9f0 [ 431.240230] vfs_write+0x467/0x8c0 [ 431.243778] __x64_sys_write+0x1bf/0x3e0 [ 431.247841] ? ksys_write+0x360/0x360 [ 431.251651] do_syscall_64+0x15b/0x230 [ 431.255564] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 431.260749] RIP: 0033:0x455ab9 [ 431.263935] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 431.271641] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 431.278906] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 431.286173] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 23:29:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46d600000000b95907086cb71f8d495f0000000072cb67b026d7c7ba0040000000000000000000000002000000000000000000380000000000000000000000000000009a384c87283f4649fabac056e616ea060cd9b24ac1d031408f008063ffb628f659081528ac80321e93a5a311604da070c3d3506b14b32ff493430000000000"], 0x40) 23:29:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4000) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3f, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e23, 0x2, 0x4e23, 0x1, 0xa, 0x80, 0xa0, 0xdf, 0x0, r2}, {0x8, 0x8, 0xdb7, 0x95dd, 0x100, 0x9, 0x80, 0x2f}, {0x800, 0x8001, 0x1000}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@broadcast=0xffffffff, 0x4d4, 0x3c}, 0x2, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x3500, 0x7, 0x0, 0x7399, 0x7, 0x6, 0x7}}, 0xe8) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR, @ANYBLOB="136d5090762e24574bdc87811751fd9762a1ec76c3c79d3ac7ecdc93aefd49e0b587db843e8bb64964054812ee34a8fce776d50d83c581d64a85bb10cc6562c3f9a15458f5a50b3750f39711aa92f42de4064cb636da883eb97ab85e926fc9b3c5032c01c1fbe9abdd23ef187b04091f1f62fd125dcd76e25e9d7716c1ed0086d83430a8b9754d1e1c8e7889ae744d310ea6894f41aaafdbb60da21fdb6030244137b60fc95380717702b0"]]], 0x8) 23:29:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/188, 0xd3}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:26 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x404202, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x10, r1, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c465600000000000000000000000000000000000000000000000000000040000000000000000000000000000b0000000000000038000000000000000000"], 0x40) 23:29:26 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400000, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 431.293439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 431.300709] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000014 23:29:26 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x40000, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x70, 0x7cfb, 0x3, 0x5, 0x1, 0x0, 0x8, 0x20001, 0x1, 0x80, 0x7f, 0x7, 0x8001, 0xfffffffffffffff9, 0x100000000, 0x200, 0x85, 0x3, 0x9, 0x5, 0xffff, 0x67, 0x3, 0x235, 0xadd1, 0x8000, 0xad, 0x2, 0x59c5, 0x0, 0x1, 0x21d, 0x917, 0x37ea, 0x7fffffff, 0x800, 0x2, 0x0, 0x20, 0x4, @perf_bp, 0x30000, 0x48e42a0c, 0xffffffffffffff01, 0x3, 0x25c, 0x40, 0x5}, r0, 0xe, r1, 0x4) 23:29:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x2) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000000000000000000000000004000000000000000000000000006000038000000000800000000000000000000988f429f771af18327fb41eaae8fc677c5b19a286993a986488c9770732d31e045d3147ed6e2a33e35dc450c312c4eece78fa48a3508e913e2f114f75f5c3543fde6dddbd1675da86847304b5f007899f3a934ffa56c80ed42dbd2907b132e19ad053512fb82350c74711238625651931f5573ebd3b3a3696ee0cbd7fca6533277cceaf82732404ce01e183f65f928e2e128284069026a2549775b2a29806713013e2bae1c9f506a4986fb1bc5fa47571c32d66245a4654735d196b0b8643679140a1f6c74cb8d1da9b69a06b01d7be1d79046b390a52a9bd43f2530049f45207049bc0bcd2c4f74ca6303ad"], 0x40) 23:29:26 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x4200) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000, 0x203, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x2, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080)=0x8, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4656000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000"], 0x40) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 23:29:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:26 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x183}], 0x1}, 0x0) 23:29:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) socket$inet6(0xa, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:26 executing program 6: mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:26 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff7, 0x410000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x55, "54f88968a5f75af66a82036fca4f435470b605c1ddb7420659c6fc30791b36202d4fe14deba7423822824c367082e34fff367c4244136381cbc11b2d955e362af50cc02c0792999c7a5ccf63071097ad018c18afb4"}, &(0x7f00000000c0)=0x5d) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0xec, "40c92034c77e65dd63ff5c80e6bfcb93e2b788614fc77a2f729599ba93fba1f4cd9d78e25c5ba73ac1467af3dd3c0dd995d13e4b30bde0c0bcbf862e9365591ad966c2783471905218439b8fe2d1531c3c881913fb229342d053c08edcdae8d2afad5418e9c7ca0ba25b5e2e8f4fb7d88f58e741a62c852df7d735d154ebe550d6d2e835eedd53a5da8a747f545d26f0f489a3b146c4fd9469fd18d96f13d24fa791416bfc0fbca18082f4f1af041d55366a090ed101964ab923735bc366cb8ea68254bc143f55f96275f74294c427914bfeb6ab547aa394321b6a3902503b9edd0c52afa9d301663c175fcf"}, &(0x7f0000000200)=0xf4) 23:29:26 executing program 5 (fault-call:1 fault-nth:21): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:26 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000001500)='/dev/dsp#\x00', 0xfff, 0x301800) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x400}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0xffd, 0x0, 0x3, 0x1, 0x0, 0x2, 0x8}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x401}}, 0x1f, 0x0, 0x101, 0x100000001}, 0x98) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000b40)=""/249) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='GPL)cpuset'}, 0x10) write$tun(r2, &(0x7f0000000080)={@void, @val={0x2, 0x80, 0x6, 0xf10c, 0x9, 0xb5}, @ipv6={0x8, 0x6, "121f97", 0x1360, 0x3b, 0x10001, @local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80, [], 0x1f}, {[@srh={0xff, 0x12, 0x4, 0x9, 0x7f, 0x40, 0x4, [@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @empty, @dev={0xfe, 0x80, [], 0x1a}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @empty]}, @hopopts={0x6c, 0x8, [], [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1={0x0, 0x1}, @pad1={0x0, 0x1}, @hao={0xc9, 0x10, @loopback={0x0, 0x1}}, @ra={0x5, 0x2, 0xffffffffffffffff}, @ra={0x5, 0x2}, @calipso={0x7, 0x10, {0x8001, 0x2, 0x8, 0x6, [0x3]}}, @jumbo={0xc2, 0x4, 0x8}]}, @srh={0xc, 0x2, 0x4, 0x1, 0x5, 0x30, 0x0, [@mcast2={0xff, 0x2, [], 0x1}]}, @hopopts={0x0, 0xe, [], [@jumbo={0xc2, 0x4}, @enc_lim={0x4, 0x1, 0xffffffffffff0000}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x7, 0x41, "65668edc428473f280a04dda7f8280557172127938f1bf25342e217881b70a7d067c2ee2041f4549bb45ecf73c57eb9c7bfd8c8d765735d912ba951653ca8b0c71"}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @remote={0xfe, 0x80, [], 0xbb}}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @pad1={0x0, 0x1}]}, @routing={0x9d, 0xe, 0x0, 0x2, 0x0, [@mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0xb}, @dev={0xfe, 0x80, [], 0x18}, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @dev={0xfe, 0x80, [], 0x1a}, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}]}, @dstopts={0x2b, 0xc, [], [@hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x21}}, @pad1={0x0, 0x1}, @enc_lim={0x4, 0x1, 0xfffffffffffff001}, @calipso={0x7, 0x48, {0x1ff, 0x10, 0x7fff, 0x8, [0x40, 0xfffffffffffffff7, 0x6, 0xb04a, 0x200, 0x5dc0, 0x4, 0xffff]}}]}, @routing={0x3b, 0x6, 0x1, 0xc3c, 0x0, [@loopback={0x0, 0x1}, @loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}]}, @srh={0x3f, 0x10, 0x4, 0x8, 0x800, 0x8, 0x905, [@empty, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff]}, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff]}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}]}, @hopopts={0x3a, 0x4, [], [@generic={0x2, 0x20, "44045b3074c05570e3b4bf259004c10240b6b0137ba316160eea9ab9a24fbcc3"}]}], @dccp={{0x4e23, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x7, 0x9, "08aee3", 0xffff, "2c144a"}, "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"}}}}, 0x1392) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000014c0)) link(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='./file0\x00') [ 431.898789] sg_write: 26 callbacks suppressed [ 431.898816] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 431.898816] program syz-executor5 not setting count and/or reply_len properly [ 431.958461] FAULT_INJECTION: forcing a failure. [ 431.958461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.965180] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 431.965180] program syz-executor3 not setting count and/or reply_len properly [ 431.970326] CPU: 1 PID: 21971 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 431.970332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.970337] Call Trace: [ 431.970361] dump_stack+0x185/0x1d0 [ 431.970384] should_fail+0x87b/0xab0 [ 431.970404] __alloc_pages_nodemask+0x600/0x5cc0 [ 431.970444] ? kernel_poison_pages+0x1a0/0x360 [ 432.021598] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 432.027119] ? get_page_from_freelist+0xacd1/0xb7b0 [ 432.032144] ? kernel_text_address+0x34d/0x3a0 [ 432.036738] ? kmsan_set_origin_inline+0x6b/0x120 [ 432.041587] kmsan_internal_alloc_meta_for_pages+0x105/0x710 [ 432.047393] ? is_console_locked+0x29/0x50 [ 432.051628] ? kmsan_report+0x4f/0x2a0 [ 432.055522] ? __msan_warning_32+0x70/0xc0 [ 432.059766] ? kmsan_set_origin_inline+0x6b/0x120 [ 432.064611] kmsan_alloc_page+0x87/0xe0 [ 432.068592] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 432.073353] ? kmsan_set_origin_inline+0x6b/0x120 [ 432.078193] ? __msan_poison_alloca+0x15c/0x1d0 [ 432.082864] ? kmsan_set_origin_inline+0x6b/0x120 [ 432.087714] ? __msan_poison_alloca+0x15c/0x1d0 [ 432.092385] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 432.097744] ? cap_capable+0x222/0x350 [ 432.101633] alloc_pages_current+0x6b1/0x970 23:29:27 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000558000/0x2000)=nil, 0x2000, 0xf) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5f358683, 0x40080) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x148, r1, 0x300, 0x70bd26, 0x25dfdbff, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffdf5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback={0x0, 0x1}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3d94}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xa47}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 23:29:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000140)={0x485, {{0x2, 0x4e21, @rand_addr=0x5}}, {{0x2, 0x4e20, @broadcast=0xffffffff}}}, 0x108) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) timer_create(0x7, &(0x7f0000000280)={0x0, 0xf, 0x0, @tid=r2}, &(0x7f0000000300)) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) sendmsg$rds(r1, &(0x7f00000009c0)={&(0x7f00000002c0)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000800)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000340)=""/17, 0x11}, &(0x7f0000000380), 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x72c, 0x6}, &(0x7f00000003c0)=0x9211, &(0x7f0000000400)=0x480000, 0x2, 0x6, 0x3f, 0x1, 0x10, 0x4e}}, @rdma_dest={0x18, 0x114, 0x2, {0x4, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}, @mask_fadd={0x58, 0x114, 0x8, {{0xa8ee, 0x1}, &(0x7f0000000440)=0x2, &(0x7f0000000480)=0x27, 0x3, 0x268, 0x100000000, 0xfd, 0x10, 0x5d24}}, @rdma_args={0x48, 0x114, 0x1, {{0x3}, {&(0x7f00000004c0)=""/33, 0x21}, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x5, 0x8, 0x5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x3ff}, &(0x7f0000000780)=0x20, &(0x7f00000007c0)=0x8000000, 0xb1c8, 0x7, 0x800, 0x1, 0x33, 0x10}}], 0x1b0}, 0x40000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) ioctl$TIOCCBRK(r1, 0x5428) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000a00)={0x9, 0x8603, 0x8ca, 0x800, r3}, &(0x7f0000000a40)=0x10) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2a, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) close(r0) epoll_create1(0x80000) timer_gettime(r4, &(0x7f0000000080)) [ 432.106046] sg_build_indirect+0x4ee/0xc90 [ 432.110283] sg_common_write+0x2260/0x3ad0 [ 432.114537] sg_write+0x14d9/0x15b0 [ 432.118173] ? kmsan_set_origin_inline+0x6b/0x120 [ 432.123109] ? kmsan_set_origin_inline+0x6b/0x120 [ 432.127954] ? __msan_poison_alloca+0x15c/0x1d0 [ 432.132625] ? vfs_write+0x467/0x8c0 [ 432.136335] ? __vfs_write+0xc9/0x9f0 [ 432.140136] ? vfs_write+0x467/0x8c0 [ 432.143853] ? sg_read+0x3420/0x3420 [ 432.147564] ? sg_read+0x3420/0x3420 [ 432.151281] __vfs_write+0x1aa/0x9f0 [ 432.155004] vfs_write+0x467/0x8c0 [ 432.158553] __x64_sys_write+0x1bf/0x3e0 [ 432.162622] ? ksys_write+0x360/0x360 [ 432.166434] do_syscall_64+0x15b/0x230 [ 432.170330] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 432.175541] RIP: 0033:0x455ab9 [ 432.178743] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 432.186476] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 432.193741] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 432.201009] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 23:29:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x220900) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x0, @tick=0x8, 0x1, {0x5, 0x20}, 0x20, 0x0, 0x1}) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) 23:29:27 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3f, 0x4404) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@remote, @dev}, &(0x7f0000000080)=0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@reserved=0x1}) [ 432.208273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 432.215555] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000015 23:29:27 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x5, [@random="2735794e0e22", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @random="edbaf9b7ce7e", @empty]}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0x10000, 0x8) 23:29:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 432.281581] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 432.281581] program syz-executor2 not setting count and/or reply_len properly 23:29:27 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x64, 0x240) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x4, &(0x7f0000000180)=0x4, 0x4) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) flistxattr(r2, &(0x7f00000000c0)=""/105, 0x69) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000516000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) [ 432.343603] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 432.343603] program syz-executor2 not setting count and/or reply_len properly [ 432.370596] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 432.370596] program syz-executor3 not setting count and/or reply_len properly 23:29:27 executing program 5 (fault-call:1 fault-nth:22): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 432.490401] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 432.490401] program syz-executor5 not setting count and/or reply_len properly [ 432.543040] FAULT_INJECTION: forcing a failure. [ 432.543040] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.555275] CPU: 0 PID: 22004 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 432.562245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.571614] Call Trace: [ 432.574248] dump_stack+0x185/0x1d0 [ 432.578786] should_fail+0x87b/0xab0 [ 432.582544] __alloc_pages_nodemask+0x600/0x5cc0 [ 432.587344] ? kmsan_set_origin_inline+0x6b/0x120 23:29:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000040000000000000000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) [ 432.592239] ? __msan_poison_alloca+0x15c/0x1d0 [ 432.596946] ? __kmalloc+0x2d8/0x350 [ 432.598262] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 432.598262] program syz-executor2 not setting count and/or reply_len properly [ 432.600695] ? kmsan_set_origin_inline+0x6b/0x120 [ 432.600726] ? __msan_poison_alloca+0x15c/0x1d0 [ 432.600762] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 432.600805] ? cap_capable+0x222/0x350 [ 432.600855] alloc_pages_current+0x6b1/0x970 [ 432.639480] sg_build_indirect+0x4ee/0xc90 [ 432.643792] sg_common_write+0x2260/0x3ad0 [ 432.648103] sg_write+0x14d9/0x15b0 [ 432.651810] ? kmsan_set_origin_inline+0x6b/0x120 [ 432.656723] ? kmsan_set_origin_inline+0x6b/0x120 [ 432.661629] ? __msan_poison_alloca+0x15c/0x1d0 [ 432.666360] ? vfs_write+0x467/0x8c0 [ 432.670146] ? __vfs_write+0xc9/0x9f0 [ 432.673996] ? vfs_write+0x467/0x8c0 [ 432.677738] ? sg_read+0x3420/0x3420 [ 432.681478] ? sg_read+0x3420/0x3420 [ 432.685216] __vfs_write+0x1aa/0x9f0 [ 432.689003] vfs_write+0x467/0x8c0 [ 432.692625] __x64_sys_write+0x1bf/0x3e0 [ 432.696729] ? ksys_write+0x360/0x360 [ 432.700557] do_syscall_64+0x15b/0x230 [ 432.704488] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 432.709700] RIP: 0033:0x455ab9 [ 432.712929] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 432.720669] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 432.727961] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 432.735250] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 432.742537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 432.749826] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000016 23:29:27 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000c29ffc)=0x8000, 0x4) mremap(&(0x7f00005f9000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f00004b4000/0x2000)=nil) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='cpuset\x00', 0xffffffffffffff9c}, 0x10) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000180)={0x4, 0x85a, 0x800, 0x9, 0x8, 0x3, 0x100000002, 0x7ff, 0x9, 0x795}) r2 = getpgid(r0) syz_open_procfs(r2, &(0x7f0000000000)='net/ipx\x00') madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:27 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) prctl$void(0x27) 23:29:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffffc, 0x1) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000040)) 23:29:27 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400, 0x2) accept4$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000600)=0x14, 0x80800) bind$packet(r0, &(0x7f0000000640)={0x11, 0xf8, r1, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f000077c000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000e27000/0x3000)=nil) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="040000000000000002004e24ac141413000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054f1db12351c0f613f818ef1b1f220b418d71ccecee7a953e4343f0632a6fb5ed6e4a347f2e310a22f88fe436aed5cf43636122ca82bd10459ee9cdd9e348fdf52099ab2dfd3d833114806244b5e42f14254011afc3c51672597a55dc8b705ce0827d086edc2016b1eca3ecc1a29e84454a569a4010fd92c0a789ff6c130f6d59fedf5f0921720b564bb98120ff8256d"], 0x110) mincore(&(0x7f000053e000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/206) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x23) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x9, 0x3, 0x5}, 0x8) 23:29:27 executing program 5 (fault-call:1 fault-nth:23): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:27 executing program 7: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ip6tnl0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}}) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mlock2(&(0x7f000065a000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 432.922736] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 432.922736] program syz-executor5 not setting count and/or reply_len properly [ 432.931407] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 432.931407] program syz-executor3 not setting count and/or reply_len properly [ 432.963951] FAULT_INJECTION: forcing a failure. [ 432.963951] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.975895] CPU: 1 PID: 22033 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 432.982828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.992173] Call Trace: [ 432.994764] dump_stack+0x185/0x1d0 [ 432.998403] should_fail+0x87b/0xab0 [ 433.002125] __alloc_pages_nodemask+0x600/0x5cc0 [ 433.006905] ? kernel_poison_pages+0x1a0/0x360 [ 433.011525] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 433.016982] ? get_page_from_freelist+0xacd1/0xb7b0 [ 433.022002] ? kernel_text_address+0x34d/0x3a0 [ 433.026600] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.031453] kmsan_internal_alloc_meta_for_pages+0x8d/0x710 [ 433.037177] ? is_console_locked+0x29/0x50 [ 433.041415] ? kmsan_report+0x4f/0x2a0 [ 433.045313] ? __msan_warning_32+0x70/0xc0 [ 433.049554] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.054410] kmsan_alloc_page+0x87/0xe0 [ 433.058390] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 433.063158] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.068004] ? __msan_poison_alloca+0x15c/0x1d0 [ 433.072674] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.077531] ? __msan_poison_alloca+0x15c/0x1d0 [ 433.078242] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 433.078242] program syz-executor2 not setting count and/or reply_len properly [ 433.082202] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 433.082215] ? cap_capable+0x222/0x350 [ 433.082234] alloc_pages_current+0x6b1/0x970 [ 433.082252] sg_build_indirect+0x4ee/0xc90 [ 433.082272] sg_common_write+0x2260/0x3ad0 [ 433.082300] sg_write+0x14d9/0x15b0 [ 433.082322] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.082358] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.133109] ? __msan_poison_alloca+0x15c/0x1d0 [ 433.137780] ? vfs_write+0x467/0x8c0 [ 433.141491] ? __vfs_write+0xc9/0x9f0 [ 433.145291] ? vfs_write+0x467/0x8c0 [ 433.149003] ? sg_read+0x3420/0x3420 [ 433.152712] ? sg_read+0x3420/0x3420 [ 433.156430] __vfs_write+0x1aa/0x9f0 [ 433.160151] vfs_write+0x467/0x8c0 [ 433.163700] __x64_sys_write+0x1bf/0x3e0 [ 433.167765] ? ksys_write+0x360/0x360 [ 433.171565] do_syscall_64+0x15b/0x230 [ 433.175457] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 433.180639] RIP: 0033:0x455ab9 [ 433.183822] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.191556] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 433.198821] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 433.206083] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 433.213346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 23:29:28 executing program 6: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) r1 = semget(0x1, 0x4, 0x90) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000000)=""/1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) 23:29:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pipefs\x00', 0x100000, 0x0) 23:29:28 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 433.220627] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000017 23:29:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x1, r2, 0x3c, 0x1, @in={0x2, 0x4e24, @broadcast=0xffffffff}}}, 0xa0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)) socket$bt_hidp(0x1f, 0x3, 0x6) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='/dev/sg#\x00', 0xffffffffffffff9c}, 0x10) ioctl$TIOCNOTTY(r3, 0x5422) 23:29:28 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) madvise(&(0x7f00004b9000/0x2000)=nil, 0x2000, 0x8) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 23:29:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0xffffffffffffffff, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:28 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000340)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:28 executing program 4: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) getgroups(0x1, &(0x7f00000000c0)=[0x0]) setregid(r0, r1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:28 executing program 5 (fault-call:1 fault-nth:24): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xb4f59fb9c946d420, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7fff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r2, 0xf5c4}, &(0x7f0000000140)=0x8) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000a00)=[{&(0x7f0000000180)=""/17}, {&(0x7f0000000900)=""/221}, {&(0x7f00000002c0)=""/41}, {&(0x7f0000000300)=""/154}, {&(0x7f00000003c0)=""/240}, {&(0x7f00000004c0)=""/28}, {&(0x7f0000000ac0)=""/101}, {&(0x7f0000000640)=""/138}, {&(0x7f0000000700)=""/231}, {&(0x7f0000000800)=""/17}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:28 executing program 7 (fault-call:1 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:28 executing program 1: socketpair$inet(0x2, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x2) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9f9, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000c29ffc), 0x1c7) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 433.547801] FAULT_INJECTION: forcing a failure. [ 433.547801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 433.559661] CPU: 1 PID: 22073 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 433.566586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.575940] Call Trace: [ 433.578541] dump_stack+0x185/0x1d0 [ 433.582180] should_fail+0x87b/0xab0 [ 433.585904] __alloc_pages_nodemask+0x600/0x5cc0 [ 433.590669] ? kernel_poison_pages+0x1a0/0x360 [ 433.595258] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 433.600708] ? get_page_from_freelist+0xacd1/0xb7b0 [ 433.605727] ? kernel_text_address+0x34d/0x3a0 [ 433.610311] ? __kernel_text_address+0x34/0xe0 [ 433.614894] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 433.620356] kmsan_internal_alloc_meta_for_pages+0x105/0x710 [ 433.626150] ? is_bpf_text_address+0xb4/0x4b0 [ 433.630653] ? __kernel_text_address+0x34/0xe0 [ 433.635237] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.640085] kmsan_alloc_page+0x87/0xe0 [ 433.644070] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 433.648833] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.653694] ? __msan_poison_alloca+0x15c/0x1d0 [ 433.658369] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.663237] ? __msan_poison_alloca+0x15c/0x1d0 [ 433.667920] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 433.673287] ? cap_capable+0x222/0x350 [ 433.677185] alloc_pages_current+0x6b1/0x970 [ 433.681602] sg_build_indirect+0x4ee/0xc90 [ 433.685845] sg_common_write+0x2260/0x3ad0 [ 433.690087] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.694945] sg_write+0x14d9/0x15b0 [ 433.698589] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.703431] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.708273] ? __msan_poison_alloca+0x15c/0x1d0 [ 433.713061] ? vfs_write+0x467/0x8c0 [ 433.716778] ? __vfs_write+0xc9/0x9f0 [ 433.720580] ? vfs_write+0x467/0x8c0 [ 433.724292] ? sg_read+0x3420/0x3420 [ 433.728004] ? sg_read+0x3420/0x3420 [ 433.731723] __vfs_write+0x1aa/0x9f0 [ 433.735447] vfs_write+0x467/0x8c0 [ 433.738995] __x64_sys_write+0x1bf/0x3e0 [ 433.743062] ? ksys_write+0x360/0x360 [ 433.746867] do_syscall_64+0x15b/0x230 [ 433.750761] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 433.755951] RIP: 0033:0x455ab9 [ 433.759133] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.766839] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 433.774104] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 433.781369] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 433.788636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 23:29:28 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x8, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000300)={0x1f, 0x3, 0x7ff, 'queue0\x00', 0x100000001}) mremap(&(0x7f0000f4e000/0x4000)=nil, 0x4000, 0x1000, 0x7ff, &(0x7f0000e55000/0x1000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x3, 0x7}) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x8000) r4 = fcntl$getown(r1, 0x9) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000200), 0x2) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x2, 0x4, 0x1f, 0xa50, '\x00', 0x6}, 0x4, 0x1, 0x100, r4, 0x3, 0x8001, 'syz0\x00', &(0x7f0000000040)=['vboxnet1\x00', 'vboxnet1posix_acl_access\x00', "e67b2900"], 0x26, [], [0x20, 0x9, 0x0, 0x10003]}) [ 433.795901] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000018 23:29:28 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x81, 0x8000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)={0x303, 0x33}, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)={0x303, 0x33}, 0x4) madvise(&(0x7f000065c000/0x4000)=nil, 0x4000, 0xa) [ 433.823749] FAULT_INJECTION: forcing a failure. [ 433.823749] name failslab, interval 1, probability 0, space 0, times 0 [ 433.835152] CPU: 1 PID: 22089 Comm: syz-executor7 Not tainted 4.17.0+ #18 [ 433.842104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.851477] Call Trace: [ 433.854118] dump_stack+0x185/0x1d0 [ 433.857781] ? kmsan_set_origin_inline+0x6b/0x120 [ 433.862671] should_fail+0x87b/0xab0 [ 433.866432] __should_failslab+0x278/0x2a0 [ 433.870729] should_failslab+0x29/0x70 [ 433.874672] __kmalloc+0xbe/0x350 [ 433.878173] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 433.883575] ? rw_copy_check_uvector+0x1a8/0x6c0 [ 433.888410] rw_copy_check_uvector+0x1a8/0x6c0 [ 433.893026] ? __msan_poison_alloca+0x15c/0x1d0 [ 433.897738] ? import_iovec+0xbf/0x600 [ 433.901660] import_iovec+0x18f/0x600 [ 433.905508] copy_msghdr_from_user+0x72c/0x830 [ 433.910648] ___sys_recvmsg+0x1f3/0x810 [ 433.914687] ? __fdget+0x4e/0x60 [ 433.918111] ? __fget_light+0x57/0x700 [ 433.922040] ? __fdget+0x4e/0x60 [ 433.925463] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 433.930872] ? __fget_light+0x6a3/0x700 [ 433.934926] __x64_sys_recvmsg+0x325/0x460 [ 433.939316] ? ___sys_recvmsg+0x810/0x810 [ 433.943497] do_syscall_64+0x15b/0x230 [ 433.947437] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 433.952651] RIP: 0033:0x455ab9 [ 433.955859] RSP: 002b:00007f67d51ffc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 433.963604] RAX: ffffffffffffffda RBX: 00007f67d52006d4 RCX: 0000000000455ab9 23:29:28 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000087a000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:29 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r1, 0x2}}, 0x18) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000ed3000/0x2000)=nil, 0x2000, 0xf) 23:29:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x6, 0x9, 0x5, 0x0, 0x0, [{r0, 0x0, 0x5}, {r0, 0x0, 0x200}, {r0, 0x0, 0x1}, {r0, 0x0, 0x7f}, {r0, 0x0, 0x3}]}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4656a2e1d4ed14d8ef04000000000000640a5cbe00000000000000000040f6ffffff000000004000000000000000000000003800540000000000000000048a7b3ea23297ddc981b0f247b14a6a2c04f2ed94365af8d6af11826e5f00"], 0x40) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x200000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x200, 0x0) r2 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x202) inotify_rm_watch(r0, r2) [ 433.970892] RDX: 0000000000000000 RSI: 0000000020005940 RDI: 0000000000000013 [ 433.978442] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 433.985741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 433.993035] R13: 00000000004c0a4c R14: 00000000004d0890 R15: 0000000000000000 23:29:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) futex(&(0x7f0000000040)=0x2, 0x7, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) 23:29:29 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = shmget(0x0, 0x2000, 0x180, &(0x7f0000f20000/0x2000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000003440)='/dev/snd/pcmC#D#p\x00', 0x8, 0x10000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000003600), &(0x7f0000003640)=0x4) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000000)=""/4096) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000001000)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x40000) sendmsg$kcm(r2, &(0x7f00000035c0)={&(0x7f0000001040)=@pptp={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x80, &(0x7f0000003500)=[{&(0x7f00000010c0)="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", 0xfb}, {&(0x7f00000011c0)="5a50f2626b7c1f637e215aa29c33a8b985f302cf82fdefe06825dc75ca67cd9fa70a7c5e657bfb0dc2c0c546ddd2ec3d1560bc06ef90e2112c2584eeaf11f4a1784d08899c6cf1c02a27b5f0aaca0b156934fe0e19302f477bb4817fade75beb2caa0c121c3f47c10bea128e332f917ee79780f5151c1b", 0x77}, {&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="83efba3873e2e0d6c969adffe737fb665abb3ef1a569c071b0ad22951a585fb1921071d41bbe2ac0c044ec89ef61104e0dd889dfe1be", 0x36}, {&(0x7f0000002280)="f62ad3c00b4e0c4589d2f2aab33b07c8cc186ab8ae893106f6038f5c2032ac44f0818f6da2ad657ea79341e555611aee3314cdc58bcd3705a3ccba6107fb17e2eaf17fda6a07d372786e", 0x4a}, {&(0x7f0000002300)="8a30a5c4310091e246f33e84e9c059cc66d57479a65d0b6c180ee88f789dc57eca7febe7954a9c88c66b76030e891611c2a341df712187287d59bf01289cedd64a976b89b411d5650d7607355c4fc539fab8ede90dcd000e303b47cdf6c453e5091eb83d32d7", 0x66}, {&(0x7f0000002380)="5f5f14fc134148f65e4b0a8d7479b71869f240082ac93bc2a3172e05e152750492ea53af9648befed61e84e2970a0e7cb12d31e6205932a92904c41cdc4d89c6bdfb6a8b07ce194af4d38d68a48cf9891dc654dcc33d3a281cb5980fc080466c6642a80a2ef5ee488e850123582a13ee313e5a416c55aee9822187e275dbd47086868d35b118e5c5de18e9a679980e4bf961940dbe8f80999853d7d8f26032f6dc8c87dba4162b2a4635628e53ec2835f9a6e74096db51670a82f0", 0xbb}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)}, {&(0x7f0000003480)="d8f7c60d88ba72dbdef3903cbfc395e7bd525c5e6ea0461a3bb3448a0ecbdaf9f0bfc63b099e4338c01d878e34c8d5334bf152dad84093ac747b08fd01c39323eb05cc8b07a7b334f00a9f5bbe22e0aee0e74a55f6d79a102231b1f7e1a185f6bab7812f04fc14faa46c1c355a911d3e80445baf077e", 0x76}], 0xa, 0x0, 0x0, 0x4000000}, 0x880) 23:29:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfffffffffffffffe}}, 0x314) 23:29:29 executing program 5 (fault-call:1 fault-nth:25): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:29 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @loopback}}, &(0x7f0000000080)=0x80) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f00000000c0)={@local, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@loopback={0x0, 0x1}, 0x2f, r1}) r2 = dup(r0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0x1000, 0x4}, {0xcf9f, 0x854}, {0x2143576a, 0x8}, {0x6, 0x4}, {0x1, 0x6102}, {0x1000, 0x871}, {0xa15d, 0x60000000000000}]}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) modify_ldt$write(0x1, &(0x7f0000000180)={0x3, 0x0, 0xffffffff, 0xb19, 0x0, 0x1, 0xfffffffffffffffe, 0x5, 0x4, 0x251}, 0x10) 23:29:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x2) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8000, 0x210400) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001ac0)=0x14) connect$can_bcm(r1, &(0x7f0000001b00)={0x1d, r2}, 0x10) rt_sigreturn() write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x2) prctl$void(0x7) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) 23:29:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x101, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000c001f00000000000300000022f2c900"]) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r2 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x1, r2}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x100000020004, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffff}, 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x1}}, 0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000040)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000140)={r5, 0x1, 0x0, 0xfffffffffffffffa, 0xf4}, &(0x7f0000000180)=0x18) 23:29:29 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f0000ff6000/0x2000)=nil) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x2}, &(0x7f0000000200)=0xfffffc5c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0xffffffffffff22ed, 0x100000000, 0xc29, 0x8001, 0x5}, &(0x7f0000000100)=0x14) 23:29:29 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x6a400, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000000c0)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8947, &(0x7f0000000000)={'veth0_to_bridge\x00', @ifru_map={0x3, 0x5, 0x2, 0x1, 0x5, 0x5}}) ioctl$sock_ifreq(r1, 0x891e, &(0x7f0000000040)={'veth1_to_team\x00', @ifru_flags=0xb400}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x4f81, 0x8, 0x7, 0x1000, 0x0, 0x4, 0x10000, 0xc, 0x120, 0xf01, 0x20, 0x7, 0x14c0fd9c, 0x7, 0x9, 0x0, 0x8, 0x9, 0x7, 0x401, 0x800000000000, 0xe0, 0x82e, 0x1f, 0x6c, 0x80, 0x4, 0xffff, 0x100, 0xffffffff, 0x5, 0x9, 0x6, 0x2, 0x80000001, 0xac3, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x20082, 0x2, 0x10001, 0x7, 0x8, 0x7ff, 0x80000000}, r2, 0xe, r0, 0x2) 23:29:29 executing program 7 (fault-call:1 fault-nth:1): r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0xb00) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x40000000056, 0x8, 0x0, 0xffffffffffffffc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "", [[], [], []]}, 0x340) 23:29:29 executing program 4: memfd_create(&(0x7f0000000000)='&&wlan0):wlan1vmnet1vboxnet0\x00', 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1000000000000000, &(0x7f0000c29ffc)=0x80000000000000, 0x1b6) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mremap(&(0x7f0000788000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000079c000/0x1000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:29 executing program 6: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)={0x8, 0x0, [{0x6000, 0xf7, &(0x7f0000000100)=""/247}, {0x13000, 0x1b, &(0x7f0000000200)=""/27}, {0xf001, 0x5c, &(0x7f0000000240)=""/92}, {0x6001, 0x6c, &(0x7f00000002c0)=""/108}, {0xd000, 0xe0, &(0x7f0000000340)=""/224}, {0xf000, 0x14, &(0x7f0000000440)=""/20}, {0xd000, 0xae, &(0x7f0000000480)=""/174}, {0xf000, 0xeb, &(0x7f0000000540)=""/235}]}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc)=0x3, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101002, 0x0) accept4$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80800) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x2008) 23:29:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x20107, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000040)={0x6, 0x2}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0xffffffffffffff80, 0x0, 0x0, 0x0, 0x0, 0x8d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) [ 434.586419] FAULT_INJECTION: forcing a failure. [ 434.586419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 434.598424] CPU: 0 PID: 22119 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 434.605405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.614778] Call Trace: [ 434.617411] dump_stack+0x185/0x1d0 [ 434.621089] should_fail+0x87b/0xab0 [ 434.624849] __alloc_pages_nodemask+0x600/0x5cc0 [ 434.629676] ? kmsan_set_origin_inline+0x6b/0x120 [ 434.634572] ? __msan_poison_alloca+0x15c/0x1d0 [ 434.639299] ? kmsan_set_origin_inline+0x6b/0x120 [ 434.644199] ? __msan_poison_alloca+0x15c/0x1d0 [ 434.648914] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 434.654307] ? cap_capable+0x222/0x350 [ 434.658242] alloc_pages_current+0x6b1/0x970 [ 434.662710] sg_build_indirect+0x4ee/0xc90 [ 434.666991] sg_common_write+0x2260/0x3ad0 [ 434.671282] ? kmsan_set_origin_inline+0x6b/0x120 [ 434.676190] sg_write+0x14d9/0x15b0 [ 434.679886] ? kmsan_set_origin_inline+0x6b/0x120 [ 434.684785] ? kmsan_set_origin_inline+0x6b/0x120 [ 434.689672] ? __msan_poison_alloca+0x15c/0x1d0 [ 434.694394] ? vfs_write+0x467/0x8c0 [ 434.698189] ? __vfs_write+0xc9/0x9f0 [ 434.702046] ? vfs_write+0x467/0x8c0 [ 434.705836] ? sg_read+0x3420/0x3420 [ 434.709594] ? sg_read+0x3420/0x3420 [ 434.713346] __vfs_write+0x1aa/0x9f0 [ 434.717137] vfs_write+0x467/0x8c0 [ 434.720747] __x64_sys_write+0x1bf/0x3e0 [ 434.724848] ? ksys_write+0x360/0x360 [ 434.728679] do_syscall_64+0x15b/0x230 23:29:29 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mbind(&(0x7f0000f2f000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000003c0)=0xd, 0x0, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'yam0\x00', r1}) madvise(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xe4c8, 0x0, 0x8, 0x1f, 0x90}, &(0x7f0000000380)=0x98) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000200)={0xbb5, 0xffff, 0x3ff, 0x9}) 23:29:29 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000340)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) clone(0x0, &(0x7f0000000500), &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000480)) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000000)) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000000000000000000000000000000000000000000000000000000000000000000038000000000000000000"], 0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) setsockopt$inet_buf(r1, 0x0, 0x3f, &(0x7f0000000080)="6cbf4524c5b3be4cb9f60b2af8a4266809249801598c10a3e0db4454967a822045645dab83c85b", 0x27) [ 434.732610] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 434.737823] RIP: 0033:0x455ab9 [ 434.741037] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.748784] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 434.756118] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 434.756137] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 23:29:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x401, 0x8000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000002c0)={0x40, 0x0, 0x0, 0x3}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000eaa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x3, 0x52, [], 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/82}, &(0x7f0000000240)=0x78) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 434.756153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 434.756171] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000019 23:29:29 executing program 5 (fault-call:1 fault-nth:26): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:29 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = getuid() setuid(r1) 23:29:29 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1000, 0x2000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x1000, "b6d3df5d24477e001f03af695e7cc3246e36f9347f37a821ba4fda3bc20d848914e36039942ec45441a70cd107e61cb68e25292c1be0ca40ccae3c7c9cc8bd66f6fe427225e6ca62215992112a483d2b785fbbbf3a3007f6e9521619c3a6935f1c2d2eb87f982111d54d17702e1df0a4f1f0645fdee584f1d5e07cc8292c82e63df0d1de61f789774cd725b934213fbd9377a89f95a522363b7054cfe8acee28c01978fcae5f3bc0befe2ea706d977c9d9ca65f80de40b94eef7e168a3c3ef18921a0e6477fc3559b8d8528c613dc241ff233e83ca472457752b487638c799a9c6f33b63496a4c9c652c33c3ed5b06a568bb64e67ce1cc65c265422c3120a56945f289738ef1b54f2ad00fa682f887f9f276b41622e230b27b27d97a0d55c7aaaf95b0e041fbebfe62e4ed0a0030750beb0ca4ca054aa74570a893c1010a1fcb90eb441f06e2dfa0ac8352983292459ed18fd1bf87e8ca1370cf0618932e33fb4c7a8f478abab879cf547d5c04dfb4476babc249b85185ec609dbed56d40c4ffe2d47ca82a883f043e8f6caf8ae8f9001374e40851a00f9befc19030d85b6e602247e81ad0ee6e693c2f3ad74bd27d827071f122bd1713dd51b10ad0d1c0f8e503733e29699a0f15eeaa9ad214189ead23002781a450d76afc1db9fd7dd106cdfb213c7845b1537a6a606566bab5367a3ef9d2ed3bffcd223d89ca06836d80ecf77cfbd5229da5acb542aa4df315a518ed144e5310823c18a260ceff59e4eec27ab633f72cedfc983a7e982d9018aad0678f65a14d1f9ded74caa8fbfc314ead11255a5cddf9830380e45321cea32e286818b717e1ce8818aeda9eb986769efc72b0ecf50705e8ea17203865945752a23246ae0f7e32db73c8aa9040698869c82bcbe456777da5c7946c6fc6bc89f652240c019789f4c80bb27b0b0877484fefff56e70aee1b0230f482d2ba781687e6bfdd07234bd8e457bb5348fd7ddf329ab09e2971bbde29e92b682239edc265e9d567d31c0eed8be4f56a73c3ff97ffdb9ef5de88782ec7244122d7ed1ebc8f9a45a4c0d21d68e88febbf2f4e13a9def693b7f5814d77c08c216c31d0e0fa375ab65c7508b92e3194a496ab4e10e32e3833fc78c64f46dbf4f0f4ec303d1b25ede6b939fe3f514471c483f4d1f429c271c4a3f3af0c9abb031aa78d955602d6b768760cd73da95f4668c3118541730d731af28b4608971db2e8be8120b10e70917326c60fd737b86411f09a45ba5c020137e326f00b6a313d57b6b49070df9354d5d096eaa11ec2156f272e70d0dc55873d682b07796994758f05133d9abde7207fd0166ef3b92e72fffb9b66e8ac12d4614f2591de0351b4ac38af4ddc31279d4572e8e1c241cb8987e93e8f79b1c148be520ffea44ef2ca73611afeacf897135083fd302887c9b7e5d152af488c1cb1e12ebe90c18cd124be25967b21912b4e6785d9b3986054123d2c3c0291d8e03acdf486dea3c8431f3e3e69bf67af9052395a7d1c1627b0d811a9f2690144e9210f22317eaf92ccafd22aeaae862ba4016a97902fafd9bcf88ce4ae1003d7eecd33644b2f74e35514891310049be78cfb8769459cc844b0c012b7beda05a0d0eb47a71ef3fcd4d0f2e2aa1e2b5e652d6a919c85740fa857a50800b2b1c1be8da57a2f2c74e3252143fac248fc13fe04bea0f5800dd60181434f2ebe9ab339ba59d16cc51e74dca3459338602fbe3b4e451a0f5ea4c4ba771a5e3c7919d646fa52682ac95f5f68085ff6f6b0fb197004e655bfe999f26d59a5467e6a9147fbe89669378eec4b2bb8be3ab88bcbc6d073db8fe8520a69a6e38d770722135a532bdbed90f79491c14a7f7b5f662ac5f6c2b6a2a11194cc2fad398ab1026857668a2f4717e2f54ade4bf2fae997112590de2fc5cff54fe79721b76e0178fe58642138b86018dda66f65de64bdb58e0b3b31a52aa96c055da577faab346121e7c91fbff7002f95e3a439a0b4fee8fbf62b8eb7a480a65d4441459476d77b135421d6f10e854b910fcaab714d959508b49775f61b87076a1d426b8a060b488a7021711eb02c3b89a5f4b46a02d04e70a824ca2e80977c9d552c40b5362d7e1a8cc13d86284100690ef5f7ced113cce9f8699acf23ff146a7d217e7787256680d76ef8424f81c7630287e2e9aa5abc054f2e1b686780a681a67a9eb7b9d51e7477d9a4d42ab47a300eba5b90c62655ff4581f1714dd572bad55d4bd169baefe0dc863e8008b29fb6e2bffa219ba4b0ae61ef79dab245480b7d149631c34d98e09e4242c05d8460b6dbb9bce0dd057d9a8f83b389bd9113b13efa82a30aa1c04767ec75ff9ab18810cda1c5b63814f3c9d0781b5819741d46bc937c4b4aa768e940e04c9edad6ff55f010f117be6086023ef92241889eb4fa6bccc33856fca699e0a365a95a66b67b4e7357f49e1710e371fc1cf987f5c803ce55b4c722c0ab5411790f11d59e8b7971261f235f5458dd80b92bcf22adb60f12669bffcf83c58ea7860e15ff5073f88f9f64793acf217a7fdb2d9837d08e9e6484ca321768f46f3e0a87ecd42c9e1a5d49c031ef1905ddafc61ebfe489593eea85d5bacd3f3f2b453fd45a9b1635d122ddbc42c719b50850e06c9440f24b92243c6440a00636f7a94a86e3124132933635d2d1e94f185fb0111ed1a8af8fc95cbf4633e8ff18d7eebb5fa119b526a573887afd0270cb853d29a217a0ac46553f7bdb4f673a7d4b2f5ba76370fb6a682508867734e2b88d7a1e0f126ecf25e6ed11c85f19375ede676031dba1a17c5a6ad1aa28f60c8bb2d411499052c76b1321c56e0328ff38f8ad91bb13f9b78baca708f669c60abca17fa030b4927cfcd0bab7ba95fadb68adfe56ab39546e3ec5dabed8e995648c7a261d7c2a9c06ba913bfb2a6b858259929bf0faddc47359349319efcd0266d99d940838088451caf4479efff65e6d34919eec4c4600e4f36834e254a7cd9a293895e00ff759af81b3f3a05543672d9a8d774923bc1508554d1906260e9b5c0b8525c5b2ed64b8c2d80dd4ed8ba608c3903855e6488622e09d84b7500d5a3dff5d59df2cad778c6ffc02bf5ae3b7f151a70c7caaabca406329143a9c76f417e8df3aa9355aa9b807e87cbb3949c4cdc256d0bcde6d97ce86019fa9f2a56496d1ee621ae9ef6db553bb55ec74b5cab653f29e4a11e441dad739b5e77ba6171cc90870c8e9d48817fd4840245341102ef4fc82cc3e0a8a91d1ece1abcf79f681dda6a6219733d80868aa919df72fe53cfe6c1d8bc6d7905282080592efc8829566cb8eb8ea82d38d77288a47e0118dadbaea16a31a0ea710ca3c1a66c25e4bb74ab44bc9bc6ef4b6f306ced0e2232b9328d0bea4f50e47cda71053581a8f1389a81968a4e25b8ca3a6b9d1e4393e7790cc498fadb1871a03d22022ce06dda5ace573565614cbd2df61cb225a711d4c9a68459d2d39c8c4ac5e91dabf0121fd6dfaa2887910eb9d15d28765787a3d7c2a0f912ac08d479cdb4c3e1d4e8c2398dd2d7268ee8e871c2698e2c0e6dddaa57d6ec0aac2bc03a4935bc644cfe97726953c911c4162b290872f17b49036e3e09568f863182c5ad0f27f2250c69b8823c8bb6e1b92deacdab078bffea90be9b054604407d8fc39d55562d37b3bc6ed3b70eed27e671c189efc66a4ce739518c8bb8e135c4acce4395e3a1f3080b1a61c4a4f3a8a4758ac8aa3e085f4d5fcbc3ab365490bf60310dd337bcec4a7b97888b70d4eed3bce9215025ee20c7dc49f126d1c440a6382a7cee5d83ad3c0b13ba4502d6052c8b536d8e4f71abf21c4644ad93e835fa39d14afc64895ad76023fb775d2fd26ac259277455f52322f03684f97fa72ebac3526f3f263ec8e8c87169988b03456dcadf1005fb459120bda332b5c6d65c74e3614aafdc31d9a11f33717a5dbc79fd66f338f138f5e859eb3a169773d480ec6ed2cf2f4b1445151072bfbc975a2a29973d512d8dafcde8a0f6056e51f8c2bfaff757b60b11869f04e70808243c25ff0c76aef2810b8bfeff190a48f638c1c8f4b5df376361b8b4a1aad3591c4fedc461f55fb37a67a4384c2c1d41147d206c952e23e5c90c131c34ef23e175a0b6ba32adc1845dd0d6cbbd69fb486242adab4125fe4980b6475fc4647357838abfcf4e55534450e6281b3d23fe95f3b44046cd65d46a22112808180101c958e894d1c1192caa3cc1765909a2dd2df4691a11cbb6c601f56b3ab4cbf16f2f7b16317cd07c1ca9aac35d0c7cafea666d140e10864c8f4d37fd72819e87fdf11cfc4bcdb1a09f40bc8e6780c2e40d27fea78f5d89f34e0eea5691e86bfb10e6319c6c11fb18a41c57b17bccc8e84550a5a9f632fe10fb15e16f84b6aaea83d8358877ab9811c9c144372fe46caf4eeee42ed851bf36bfd4bef5487a9661726e0217fce7f41dce5238deaacc22efa439d8a281708a0f0477b5af740df0ce58a90806264e4752c93b61b8e6b3cadff479e5c62e368dcff317b18584832a9120fa259a291f6ccb15b4a3cd9d80a140e02c38b95f5c9d81fb46f643ee33359ef893999c68b5c196000272715e87d3ebbc481df997f512cefc5467191be1f0822e5e02e34cd6faed06fbf0262306fecd1840e3cbbc69974d5a7a2d47ff681036e4fd3c62308973f3caceced3ff8ec7e33591e952f675af0c9cf3da1755d7a4ce5b6a47c11251a6b177a3f40d89921ef0f4808d60472f745a57da4b10aa343e2280c053fb17c1121e16f65b82904259eda05abe820d6b1ce2b196031de83f27ee199c9b6e1c4f44f837f8da974f23b4acf8e64292f45bbab33d09667df3cb3ed2ac3b8402cc18bdeb3c822773882504062cba91cab5c635af18d45ce847eb9ad2d818a61bc52abd2cc284234d8473ac34da2722f7631dd54c0279166c824f2b84aa0c6c267dc151ed3575be9a8c2a5f52e00d00ba08fdd3f57bc91e958d9366f7cd31f8d4a3ca92d4534a253dd4d95bebda8090a08e8dfce92697a23775f77b6214abdb939afacefa91bb5045633c8c1ecce8b17cb8fdef486dfceff6ec079fd9ac9e7a7e24b79ecbb6d9b540706f7a81fc4fd361e2de087cb36d0f3eb255838e207fa6bedd279b80f3f2ad981d26d42898fdd4621bae0d916b5ef3ce042eca57eebd470a5fcf0bac337e146aaeab23350618442acba63292f7124f7c7fbb2ec5833a72aeb4ff746ecf84cad24abcb3842351e57a35ca39b8f11de1ac2a330f97ee624319665dd80f705d0b8cdcb49ad9b1cc477e6d84516cf171796bb81ae51e92ec3f1fef573b93ae4b47c128a52edfbe82aeed9707c05664eb2532a88cf8b7fbe80337085050ad20dd71f54958636b71a2f8171b219a95fc14dfa9c10f6a7ce5f02ab9cfeb5902adda654fb827385b8e4d553af0288cca31880f3e7898db74a266851a327a93ff5ad07e3e7ebfe34c11ca88026347768b101df2d12270e198dfff231038ddbb1f78b3833235b112abdf043b53287464f5fb113aacf03d5dc915c56014fb8fa1d8603a22e35cdc020fe9c8003d7ffecba8a00d957a3243697eaf5dd9567c6267aa36fb2fc90e9ebc1356109ac9de2949cc491aa5651678ef4444874d0d4b47e850af5ca071fe7420afe29ce4407483409995737ae3bc0492a4765d3a63bdb27c9955cc08c89f7cc7ddf4e57f237b9a0a689d04c93b8c5777cb0b42957b0654e2fcd88c6ebd57ac8325729db2c90d4e0f79717dc5c9e0e43b4b8417becd31c84e5d1a1f52642d6d34349418f78dd795276b8"}, &(0x7f0000001080)=0x1008) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000010c0)={0x8, 0x201, 0xfffffffffffffffa, 0x2, r1}, &(0x7f0000001100)=0x10) 23:29:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x400000000000, 0x8000000801) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:29 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2080, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) socket$inet(0x2, 0x0, 0x2) 23:29:30 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x1) [ 435.060310] FAULT_INJECTION: forcing a failure. [ 435.060310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.072254] CPU: 1 PID: 22169 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 435.079176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.088654] Call Trace: [ 435.091256] dump_stack+0x185/0x1d0 [ 435.094902] should_fail+0x87b/0xab0 [ 435.098630] __alloc_pages_nodemask+0x600/0x5cc0 [ 435.103393] ? kernel_poison_pages+0x1a0/0x360 [ 435.107982] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 435.113437] ? get_page_from_freelist+0xacd1/0xb7b0 [ 435.118457] ? kernel_text_address+0x34d/0x3a0 [ 435.123054] ? __kernel_text_address+0x34/0xe0 [ 435.127649] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 435.133110] kmsan_internal_alloc_meta_for_pages+0x8d/0x710 [ 435.139081] ? is_bpf_text_address+0xb4/0x4b0 [ 435.143586] ? __kernel_text_address+0x34/0xe0 [ 435.148168] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.153015] kmsan_alloc_page+0x87/0xe0 [ 435.156989] __alloc_pages_nodemask+0xf7b/0x5cc0 [ 435.161771] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.166613] ? __msan_poison_alloca+0x15c/0x1d0 [ 435.171281] ? __kmalloc+0x2d8/0x350 [ 435.175020] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.180385] ? __msan_poison_alloca+0x15c/0x1d0 [ 435.185055] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 435.190443] ? cap_capable+0x222/0x350 [ 435.194343] alloc_pages_current+0x6b1/0x970 [ 435.198763] sg_build_indirect+0x4ee/0xc90 [ 435.203026] sg_common_write+0x2260/0x3ad0 [ 435.207281] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.212141] sg_write+0x14d9/0x15b0 [ 435.215808] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.220672] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.225536] ? __msan_poison_alloca+0x15c/0x1d0 [ 435.230194] ? vfs_write+0x467/0x8c0 [ 435.233888] ? __vfs_write+0xc9/0x9f0 [ 435.237683] ? vfs_write+0x467/0x8c0 [ 435.241387] ? sg_read+0x3420/0x3420 [ 435.245099] ? sg_read+0x3420/0x3420 [ 435.248841] __vfs_write+0x1aa/0x9f0 [ 435.252572] vfs_write+0x467/0x8c0 [ 435.256153] __x64_sys_write+0x1bf/0x3e0 [ 435.260223] ? ksys_write+0x360/0x360 [ 435.264023] do_syscall_64+0x15b/0x230 [ 435.267924] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.273110] RIP: 0033:0x455ab9 [ 435.276317] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.284023] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 435.291292] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 435.298643] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 435.305908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 435.313191] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000001a [ 435.470575] FAULT_INJECTION: forcing a failure. [ 435.470575] name failslab, interval 1, probability 0, space 0, times 0 [ 435.481947] CPU: 1 PID: 22144 Comm: syz-executor7 Not tainted 4.17.0+ #18 [ 435.488889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.498242] Call Trace: [ 435.500836] dump_stack+0x185/0x1d0 [ 435.504467] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.509318] should_fail+0x87b/0xab0 [ 435.513049] __should_failslab+0x278/0x2a0 [ 435.517280] should_failslab+0x29/0x70 [ 435.521160] kmem_cache_alloc+0x129/0xb70 [ 435.525323] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.530179] ? taskstats_exit+0x17a/0x17e0 [ 435.534414] ? do_exit+0x490/0x3930 [ 435.538046] taskstats_exit+0x17a/0x17e0 [ 435.542110] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 435.547567] ? acct_collect+0x8d8/0xb20 [ 435.551539] do_exit+0xc0d/0x3930 [ 435.554990] do_group_exit+0x1a0/0x360 [ 435.558885] get_signal+0x1405/0x1ec0 [ 435.562694] ? __msan_poison_alloca+0x15c/0x1d0 [ 435.567363] ? prepare_exit_to_usermode+0x271/0x3a0 [ 435.572373] ? prepare_exit_to_usermode+0x271/0x3a0 [ 435.577394] do_signal+0xb8/0x1d20 [ 435.580949] ? inet_sendpage+0x8f0/0x8f0 [ 435.585013] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.589857] ? __msan_poison_alloca+0x15c/0x1d0 [ 435.594548] ? syscall_return_slowpath+0xe9/0x710 [ 435.599391] ? prepare_exit_to_usermode+0x4a/0x3a0 [ 435.604318] ? syscall_return_slowpath+0xe9/0x710 [ 435.609175] prepare_exit_to_usermode+0x271/0x3a0 [ 435.614011] syscall_return_slowpath+0xe9/0x710 [ 435.618693] ? __x64_sys_recvmsg+0x38e/0x460 [ 435.623095] do_syscall_64+0x1ad/0x230 [ 435.626980] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.632157] RIP: 0033:0x455ab9 [ 435.635334] RSP: 002b:00007f67d51ffc68 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 435.643044] RAX: fffffffffffffe00 RBX: 00007f67d52006d4 RCX: 0000000000455ab9 [ 435.650310] RDX: 0000000000000000 RSI: 0000000020005940 RDI: 0000000000000013 [ 435.657570] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 23:29:30 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:30 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="b1f6bea79aefa471371706efa30dc9eb9fee15c873685b9e32cefda17cb21d931994e6613f6cdaaf65dd555587aa41d5bfa1b2b3", 0x34) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:30 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x100, 0x7470265a6997ff45) timerfd_gettime(r0, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x0, @loopback=0x7f000001, 0x4e23, 0x3, 'lc\x00', 0x0, 0x3}, 0x2c) 23:29:30 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) r2 = dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000e26000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 23:29:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xad4, 0x5, 0x39ef, 0x4, 0x10000}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x10000, 0x8e, 0xffffffff}, &(0x7f0000000140)=0x10) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:30 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000140)=""/24) r1 = semget$private(0x0, 0x2, 0x1) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000540)={{0x5, r2, r3, r4, r5, 0x90, 0x7}, 0x8, 0x4, 0x5}) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4000040000000000, 0x2) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c465600009e000000aaee8f621b77810000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000"], 0x40) r7 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r7, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r8, r9/1000+10000}, {0x0, 0x7530}}) 23:29:30 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mbind(&(0x7f0000f2f000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000003c0)=0xd, 0x0, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'yam0\x00', r1}) madvise(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xe4c8, 0x0, 0x8, 0x1f, 0x90}, &(0x7f0000000380)=0x98) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000200)={0xbb5, 0xffff, 0x3ff, 0x9}) 23:29:30 executing program 5 (fault-call:1 fault-nth:27): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 435.664828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 435.672097] R13: 00000000004c0a4c R14: 00000000004d0890 R15: 0000000000000001 [ 435.759836] FAULT_INJECTION: forcing a failure. [ 435.759836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.771950] CPU: 0 PID: 22197 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 435.778870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.788221] Call Trace: [ 435.790827] dump_stack+0x185/0x1d0 [ 435.794462] should_fail+0x87b/0xab0 [ 435.798184] __alloc_pages_nodemask+0x600/0x5cc0 [ 435.802955] ? kernel_poison_pages+0x1a0/0x360 23:29:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x81, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x20}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x99d) recvfrom(r1, &(0x7f0000000140)=""/66, 0x42, 0x10001, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x4, 0x1, 0x4}}, 0x80) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={r2, 0x0, 0x0, 0x2}, &(0x7f0000001000)=0xfffffffffffffd2b) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 435.807544] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 435.812997] ? get_page_from_freelist+0xacd1/0xb7b0 [ 435.818543] ? kernel_text_address+0x34d/0x3a0 [ 435.823132] ? __kernel_text_address+0x34/0xe0 [ 435.827737] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 435.827761] kmsan_internal_alloc_meta_for_pages+0x105/0x710 [ 435.827772] ? is_bpf_text_address+0xb4/0x4b0 [ 435.827793] ? __kernel_text_address+0x34/0xe0 [ 435.827808] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.827826] kmsan_alloc_page+0x87/0xe0 [ 435.827842] __alloc_pages_nodemask+0xf7b/0x5cc0 23:29:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560000000000007f00000000000000000e000000000400000000000040000000000000000009a50000000000000000fdffff370000e67d0000000000"], 0x40) [ 435.827862] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.827875] ? __msan_poison_alloca+0x15c/0x1d0 [ 435.827889] ? kmsan_set_origin_inline+0x6b/0x120 23:29:31 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f00006bf000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000eb2000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x1a}, 0x4}}, 0x9, 0x7}, &(0x7f0000000200)=0x90) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x7fff) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x3, r0}) [ 435.827900] ? __msan_poison_alloca+0x15c/0x1d0 23:29:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7ff, 0x101000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:31 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x8, 0x101, 0x9, 0x8000, 0x4}) [ 435.827914] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 435.827925] ? cap_capable+0x222/0x350 23:29:31 executing program 6: r0 = socket$inet6(0xa, 0x1006, 0x8201003) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ip6_vti0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x88, &(0x7f00000001c0), &(0x7f0000000180)=0x4) setsockopt$inet6_udp_int(r0, 0x11, 0xfffffffffffffffc, &(0x7f0000000240)=0xfffffffffffffffd, 0x3) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x1000, 0x0, &(0x7f0000fae000/0x1000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x7, {{0xa, 0x4e23, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0x691}}, {{0xa, 0x4e21, 0x7f, @loopback={0x0, 0x1}, 0x4}}}, 0x108) [ 435.827941] alloc_pages_current+0x6b1/0x970 [ 435.827959] sg_build_indirect+0x4ee/0xc90 [ 435.827976] sg_common_write+0x2260/0x3ad0 [ 435.827989] ? kmsan_set_origin_inline+0x6b/0x120 [ 435.828011] sg_write+0x14d9/0x15b0 [ 435.828039] ? kmsan_set_origin_inline+0x6b/0x120 23:29:31 executing program 5 (fault-call:1 fault-nth:28): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 435.828054] ? kmsan_set_origin_inline+0x6b/0x120 23:29:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x7ff}, [], "", [[], [], [], [], [], [], []]}, 0x740) [ 435.828068] ? __msan_poison_alloca+0x15c/0x1d0 [ 435.828084] ? vfs_write+0x467/0x8c0 [ 435.828097] ? __vfs_write+0xc9/0x9f0 [ 435.828109] ? vfs_write+0x467/0x8c0 [ 435.828119] ? sg_read+0x3420/0x3420 [ 435.828128] ? sg_read+0x3420/0x3420 [ 435.828141] __vfs_write+0x1aa/0x9f0 [ 435.828162] vfs_write+0x467/0x8c0 [ 435.828181] __x64_sys_write+0x1bf/0x3e0 [ 435.828196] ? ksys_write+0x360/0x360 [ 435.828207] do_syscall_64+0x15b/0x230 [ 435.828225] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.828234] RIP: 0033:0x455ab9 [ 435.828241] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.828253] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 435.828261] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 435.828267] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 435.828273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 435.828280] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000001b [ 436.198615] FAULT_INJECTION: forcing a failure. [ 436.198615] name failslab, interval 1, probability 0, space 0, times 0 [ 436.198647] CPU: 1 PID: 22225 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 436.198662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.198673] Call Trace: [ 436.198716] dump_stack+0x185/0x1d0 [ 436.198753] should_fail+0x87b/0xab0 [ 436.198794] __should_failslab+0x278/0x2a0 [ 436.198830] should_failslab+0x29/0x70 [ 436.198878] __kmalloc+0xbe/0x350 [ 436.198905] ? kmsan_set_origin_inline+0x6b/0x120 [ 436.198934] ? bio_copy_user_iov+0x225/0x1570 [ 436.198981] bio_copy_user_iov+0x225/0x1570 [ 436.199026] ? kmsan_memcpy_origins+0xf1/0x170 [ 436.199095] blk_rq_map_user_iov+0x4e4/0xcb0 [ 436.199144] blk_rq_map_user+0x1f9/0x260 [ 436.199189] sg_common_write+0x2ba1/0x3ad0 [ 436.199259] ? sg_common_write+0x2a91/0x3ad0 [ 436.199289] sg_write+0x14d9/0x15b0 [ 436.199352] ? kmsan_set_origin_inline+0x6b/0x120 [ 436.199399] ? kmsan_set_origin_inline+0x6b/0x120 [ 436.199444] ? __msan_poison_alloca+0x15c/0x1d0 [ 436.199493] ? vfs_write+0x467/0x8c0 [ 436.199548] ? __vfs_write+0xc9/0x9f0 [ 436.199594] ? vfs_write+0x467/0x8c0 [ 436.199632] ? sg_read+0x3420/0x3420 [ 436.199669] ? sg_read+0x3420/0x3420 [ 436.199698] __vfs_write+0x1aa/0x9f0 [ 436.199766] vfs_write+0x467/0x8c0 [ 436.199854] __x64_sys_write+0x1bf/0x3e0 [ 436.199893] ? ksys_write+0x360/0x360 [ 436.199921] do_syscall_64+0x15b/0x230 [ 436.199960] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 436.199980] RIP: 0033:0x455ab9 [ 436.199997] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.200027] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 436.200046] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 23:29:31 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mbind(&(0x7f0000f2f000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000003c0)=0xd, 0x0, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'yam0\x00', r1}) madvise(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xe4c8, 0x0, 0x8, 0x1f, 0x90}, &(0x7f0000000380)=0x98) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000200)={0xbb5, 0xffff, 0x3ff, 0x9}) [ 436.200063] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 436.200079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 436.200098] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000001c 23:29:31 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000240)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x0, 0x0, 0x35f}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:31 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x9, 0x3, 0xf9a8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180), 0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000040)="bcaf2576ff5eaafada86a5485b4b74c33368ee0c8dda57e962570fe05ec01e0a21b7037c39ed48204def9b0f9133d88daac6f40da3e6ac16ef285692de14a66679b1c444714e1f157ecff83d4c912b03eda9af24bada0f202ae3bb87ff2e055b94916412f249f7479b89856f31ac36a63993338c3a82c114b8a36a37c1286a75433d540f96c731ce92ef2c03c0825fa42fd3e7e242229ade2e038749af5d4508de013b369593abeff18c") ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000240)) 23:29:31 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc)=0x7, 0x4) mremap(&(0x7f0000f74000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f000086c000/0x4000)=nil, 0x4000, 0x3) 23:29:31 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) umount2(&(0x7f0000000000)='./file0\x00', 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:31 executing program 5 (fault-call:1 fault-nth:29): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:31 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f00005bb000/0x2000)=nil, 0x2000, 0x8) 23:29:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x24, 0x21, 0x12, 0x1a, 0xa, 0x101, 0x1, 0x53}}) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x800000000000000, 0x2000) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:31 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) r2 = dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000e26000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) [ 436.878589] FAULT_INJECTION: forcing a failure. [ 436.878589] name failslab, interval 1, probability 0, space 0, times 0 [ 436.889958] CPU: 0 PID: 22254 Comm: syz-executor5 Not tainted 4.17.0+ #18 [ 436.896922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.906300] Call Trace: [ 436.908934] dump_stack+0x185/0x1d0 [ 436.912606] ? __x64_sys_write+0x1bf/0x3e0 [ 436.916884] should_fail+0x87b/0xab0 [ 436.920646] __should_failslab+0x278/0x2a0 [ 436.924922] should_failslab+0x29/0x70 [ 436.928869] __kmalloc+0xbe/0x350 [ 436.932379] ? bio_alloc_bioset+0x73/0xd30 [ 436.936649] ? bio_alloc_bioset+0x585/0xd30 [ 436.941004] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 436.946407] bio_alloc_bioset+0x585/0xd30 [ 436.950594] ? kmsan_memcpy_origins+0xf1/0x170 [ 436.955246] bio_copy_user_iov+0x484/0x1570 [ 436.959655] blk_rq_map_user_iov+0x4e4/0xcb0 [ 436.964127] blk_rq_map_user+0x1f9/0x260 [ 436.968242] sg_common_write+0x2ba1/0x3ad0 [ 436.972556] ? sg_common_write+0x2a91/0x3ad0 [ 436.976996] sg_write+0x14d9/0x15b0 [ 436.980697] ? kmsan_set_origin_inline+0x6b/0x120 [ 436.985588] ? kmsan_set_origin_inline+0x6b/0x120 [ 436.990477] ? __msan_poison_alloca+0x15c/0x1d0 [ 436.995198] ? vfs_write+0x467/0x8c0 [ 436.998970] ? __vfs_write+0xc9/0x9f0 [ 437.002820] ? vfs_write+0x467/0x8c0 [ 437.006579] ? sg_read+0x3420/0x3420 [ 437.010509] ? sg_read+0x3420/0x3420 [ 437.014256] __vfs_write+0x1aa/0x9f0 [ 437.018057] vfs_write+0x467/0x8c0 [ 437.021679] __x64_sys_write+0x1bf/0x3e0 [ 437.025785] ? ksys_write+0x360/0x360 [ 437.029617] do_syscall_64+0x15b/0x230 [ 437.033551] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 437.038768] RIP: 0033:0x455ab9 [ 437.041973] RSP: 002b:00007fe2fe3a2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.049721] RAX: ffffffffffffffda RBX: 00007fe2fe3a36d4 RCX: 0000000000455ab9 [ 437.057012] RDX: 00000000000000d5 RSI: 00000000200001c0 RDI: 0000000000000013 [ 437.064336] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 437.071682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 23:29:32 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) r2 = dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000e26000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 23:29:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x24, 0x21, 0x12, 0x1a, 0xa, 0x101, 0x1, 0x53}}) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x800000000000000, 0x2000) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}}, 0x40) 23:29:32 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 437.078975] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 000000000000001d 23:29:32 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffff7, 0x800) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x5154, 0xfff, 0x7f, 0x2, 0x6940, 0x7}) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x8) 23:29:32 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x31d) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x7, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/145, &(0x7f0000000100)=0x91) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 437.166185] sg_write: 18 callbacks suppressed [ 437.166209] sg_write: data in/out 50/22 bytes for SCSI command 0x0-- guessing data in; [ 437.166209] program syz-executor2 not setting count and/or reply_len properly 23:29:32 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f0000e30000/0x2000)=nil) madvise(&(0x7f00005e4000/0x3000)=nil, 0x3000, 0x8) 23:29:32 executing program 5 (fault-call:1 fault-nth:30): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:32 executing program 2: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 437.492977] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 437.492977] program syz-executor5 not setting count and/or reply_len properly 23:29:32 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000657000/0x4000)=nil, 0x4000, 0xa) 23:29:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) io_cancel(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f0000001080)="8238fc7317ed2e2a538f27e8230253263a54ecb15330bcff3da30de7eb84b00ad1d02753a2b2d227a864c71778e23bbe15fd0e82195f89585b17c665b5223348f704fd6feb8017fed086e584024050398824ce2c085d1bfda6026931a55401f5cb94be175501e1736b6a0dfcc417d56f244f0c6f566f4caa34292ab4f22c3234467524abb1eb18f483a7cffadaeb870061cb324452fe8d735d6d788b1fd4a9079f716beb190d232032e887d75b905bdf4971ce6a04c886d1f9932575d0203a06dbe3edfff192521c952226fa078ae009b83bd1195cb4e75b3221b44f6f51fe3e7181aed409137b98f4ef1b5906ec830ea92e0ef12a3cd150d0a64f3ef9b26b76142fac5b2769d5ae616d498ca658adaa391cfe4086f846b97eb105675672141f4dc01351925b2183c0abb9a10470d87899f1ebf5c97d95c5ce8ff3691c439b0ebf1be055e096582672f4fe8b37a7ed251852cb5ee8e82ad4adf5fde5e3ad3b2bbf2d6c29787d214e66950ef60bfc3d634ddb741cd8730c022b6fe647e90d37235ec05e9da22efdf7712836ce9a9e43225c9d0802c0575192a547eb4048f90105cf5a097fd57d017b1d0d9232662ef5d4ea5af96a1a1e69b8b196fb7a2052d8f768cfe100163a6ec0652d2060f79234f3aa461baf285b079659e931bdc2395872f9e43e929cbb59172f1903f772092f2c41f9ca5e314e1b5a993026b0edb2dc749b736512a54edcff5427b0ea9de22f69b1a45eb1e7a76f16679a40008c4eaa059af566b52bc4757cb31b16b115be020086a867946766e7cdcab7f5d7555f6b1d130820cddd8510f108a566c6d2ea6db4ec4e2d5d5a2696c0863640d31e3c43705d15c5e34b16127e64d5de21e737d4757fabdec05a357c5ef2737cfa7abc070e34752e17cfaa9bb467f3865e2925cb4d206d4277fd2c86580e378debf0cee73b275a0df382d85622188bccee819933892a9d8712dcf07ba87d863e37866724c069a9724e6cfb92d422be93bf91f6c1fd46753e376f62e4a2e990e1128d2ac67b69cef1cc9a40508b3d29e40ca84a39ba3e2b299090292fb785a7a423cc1c11cf9eace4e36b556e4d4321088141499125e66add69da2c20d6937a9d810ad8e80b4d9ea34f4339c304388e95488b6c5862416b0ec36a1220a79e686b850214fd7482357d71a7e3fedcbde511fcc4d86e154c21f94b09aed6e19858e45f793e6182e499a954c72fd4f72ecfc2e72ccbe67d8c5b554cdb91d0912f6a3c3594fb56213693fc711b7bb83d0aac15816b5334a0ff206af794657069445a5ca3a2c5338b6900c2230e5553f94d0cc3c493ddf3008df2b8f5dcadac03181670b09cbcc4f2b796c7008ffd3fe13d8b7d4a34c4ca729bddc64bc278febe4409057cccc9191fbda512e1666d5a56cb205e7cb1d14d231871d1b124ecd2f6d2296a2c05aa4f081448abff0e92a44cc517da0a51c1f1fc2a9717fe02d40d1fe43e9b29d31a40faf5c86af4a348ec8604b3da95133fcb9251684eccab4bcf1dee6a4b5881e3df51477ffeab7ec3294fc0a15fdd8f32413f6d4c93afbfc33e980de396feaea04d0989b1339f9ae6ae2a0948428142a8a81226424a90fc36463c926ed04e35d6d18172f3118010500e83ad451b52f496fcddca9e2764d8034983f5ff836ae0d77047a820ed487da457780faa212f8d107a20d9965e1c49a416d92f8de0e101d74d501653d6040cef2c11d8f63757e77032439d955721350c5c3155b985f8073bd2ffe7caf495f65e2d65b1ca672fa297173a8c001d100eedc6698e580c4f4a990c747d256554897a0eeb819f18ecc5383379a69c5a87f0893b22d3034f617276825aa59de684fa95a830de77fe2d1f9418876f3300d95788ebd616e5c668bfdaba34614234e90dfcd60d47d276f4a2ba9d1e7d70108ed4ad7baff765c42bfaa002dfec5230ff042e1181b91665d8483fc63373671b0dcbbabd42a4a6ca4d5a2ab3f5b0ca928dcac03b7eca28b65bbb8e3812ed81b67c9331f7aceb18cb1e67f10a7e13480fcf47d6e0066806fb47434eecbd69a26bf7f75385efd0f30a9a6dee935eb982eb254b1d9c44a9f2740cade754daac6b9fb195dd815b7b152ccb533e9268d69a07739cee4a66dd6b3bf04b3bdcd21f51c188fb66c771c00e6e0af4d523803b4e232b6661e61375511da02d3e999a66361b4101367e2602f14fb4a8892bea106d9cea852f6b78ad514e83253de81d376be8a9fcf853ed39e3f4caf739b4d52c82156647b1deb6f6756278390dfdd3a633f458d5e0f2a936b1ff7c9ef2c3b266286f1f2179fa40c6d27016edeb9c2c77035032d3124ef5c0543f38f3893abbfcde5bbf56b841c1f57f3bdd8c25bd045dfe973dd99add2ae91680383e9be07f92eb2c3440bd81b84e4bf65b51a83178cba7f7ce93856eedeaff05a9e89058766f9c4105dea67e8e3813754c431500baa10313e75c925a2eb37941aae37e68c7cdbdecb002a3612ea197682162501c5c06fefedf76e6713f6560d51bc7bc8385f20c993e2d52dfd71ce13dfb1b6ff6fc17996b6cd07d3a16a055331e777b8eafee3c3a28302d48571d3a483624dbcdc980688fd2f7e260c132334955bff83cd0e82c01df072a5e04b7a11396620e7440d64a9323530d1a6d0f02c4ad1146817bf90b877ed3e4cb73484f9dc5b5d26b694fc1b060a95c9cce441533e28d6f4542c95d884bc87c422c6dbe825fcd0b10aaeffcb7b347428e57a7bce7fbb8465a1f4792e7a43aafa725fd600a22f2dcb95df0a37a01e1bb6c781e1277f1fc53881dcafba6fbfda40728034fd74de9aec4ccdd8aaa0dc09be823350260cf77f60bb1853391dea7981024566ad4fc381c905648833a80e2fa504d476cb5cf126ccf2fa415ce46b656ecda4561a8186ab479ec275d049192b341afca277babeaaecdaf7f02bfb78a6dc2e4081462e106cc553a1b8eeed005b189c36c4a069c75b643a36387db2cc142483e2c6d2494919bcb5b21a9b5fc45ce9b1e1225ac086c858faf8ff976f9843a2090bf2ca3f1ebabe1e8b1144c89b4510bce649703464fe0bc7cd7ecab368f14d5491f9399591f758d7dadb20784431b697c106188799981e03d2d0462ff6426f884cd0a342108b51a00523bebbd842c59ded6fddca814b68f1f8660c29b7bdcfb324a8e2964dc997fff211b2e790d4c9ac77c4388cad62369c0aa394901c5015ddea271e0ecf535fb69b01c716a7885c2fa3ad7a21398189b224175b87a3d63b29e983ec8067744e59ad79ce461cc2544d7da4b0a90a9c32ae8896963e23711427ac34074bfc1eb686fb392ea1c49e49b755d49bf465f6f9322f8083ff07466e02b5ad56b68ec91134aa2626652123381ae9f0189ec511520bd68bbe8e34e24a5b8005021c7776282a649fb664776bf50c1e6f34a1a6c7a5bcf24eb3d7db7fca82808adce27211ca93de466bea318f0d5077d68e858525c4675aaae910eaea120211d24f8eb880dc2b788c028b60c7f93088791b745678930130bd9babea1509fa12d74c2917b801fdfe036c06bf817aa40487e71b6d322db495da966f6f650780786ffa255d6e7ce58bc62ec91435359049a8a6c98334f5543fc98c0ab1a20aabf5a45fa95f051768cc5bb769a35a9dbd0b1102fc45a0061af967d97e206d44d4726b298f43e6d8f08723377237d1f34787c230febb5cc9deda3457091b45a09f2df3246f762f0c5dca6328821eac4b4289710a47ed5bcc1b85f70a91ca9ff0dc710471af4a1ca01481b6c4c7b9690d470df7cfb0c76451201a908b2f0b439a359d549d450e6c2b4765d13bb432f40c015720e4944de65c00dc4c09380e5612e0175a1fd7af31db7671e60abd6dc4ac03346c92c657117bc52b0febaadf02d1053342a83a2f14871e22858626f0fad1e033931bb127237fdf6cb8c6c4f7fcd61c9d3e1d7912c60a089fb642ea9125fcc89690e783bd7b725fb5d1f6151b83cd8260eceab754e4d4fa77fe75645d873ff81bc37ee0e4b8071fcec8857f27631dc265fda740b5dd90082cac4f7a52ea09cca8bae7c6f18a82e3a41bc353c25dafdd6e95d100521b1364d0a15b0e917765544ca8246de10fe1306525fadc6849d624c6660161cc2ba56995444d27641edd6e8121bd8c3b7ccb28bb27f4e848cd90a98b0533bbcf7deb4c5939324fcd54fae01a2958f33bf7ae5ad7f9c0330aa106b1aeade7636d5f1af63702b12a5b36710ce03ff8e4e8f14da20230743f9fb8202c0836891a4c7f3be064d1645316c40eef6467f45f01c4c1896ce65d61a6cb8d527b00858dd2f1b75e25d8930854055d5de32bc392aed72d54a388c73dd4b3380eaae62fa01499a6eadbc86d56ed14c4460b8c61413ff7e615b8139a6f79577152df67fc9698f6b5f5233acf35009217125a4d091482e38225e2c30bbeef5a7a722c92d045356e601ea9c2e4e78907fdf986055f5445476f432e6cbc1ca0ac136b089c4173630878ad9c1c9f9e26f606e135c9524711c2369ed17ec26d84a8f35fd9aab0f173147d425bf2aa2cca4c05187bbc03ff18994cc570b0425d856de428e33e98cf12485578be008bdeef45e38032b8f5c4bf297a90fd41948bba5c12f20151ef32f19915cf68c7082da8ad0f3e13d7f7407e9daf4680eff07f96a0f9ac4401ad02cb2d1c376aa8aa8055a2ccd4836fa4c3742f02939a2f00a16e66e564b8030362d47a5daf4aae36350270c66c7b4dbc76b1806ec1eab7633c59be19f798a3b69055c71618ab3e4a8b6a4b47b4e5eb1923ba18c622ade9ffc731d6beb45067c62bea9cec21ec35adace4dc23011314169db0a7be25e09fe7f06b568a5ee660cca4391a31e731a3c10993e0943f3e777d263b6a183766119bb70144c86ceedd1a1814a1da634b10e915478e659c0ab171a27bf5f8116e2f466c8a6a1973ae4ccc560a2bfe2d76cbbee3c4fab230c1079c79df0378ba9eb8dce418c56aa9e6341ab1e064930fe54a6908aa87ba9423beee1aafbcc1d0f75dbf40fb39568a335783b6be69e9f88fc33fbdc4918103c59cf4d90a7977f4212aeba5316c647b826ac312228f2539965b596bd7ef63c5a4a0f7fc64122c5fefbeedd5fd229cdea2f457f8f5fd70c3935f0a79f0689d8e5f9d02c865174072fef89fe146f7adb2b56b78fc157166fbfb40f243cc8f34a1e0140a64f317e19faaa36372601ceacdf732b42b27678289ee5df6c5152f9c85eb47a1fc9c2f3fe9fadc134a61053363973b1e062ce16f3b6225569c49186712b9f7f1acfba6d7bd3656dfd87fb200922eeb06a710dc04a1e44316df7478639f890da1019d797f1c8a22e86f8fe865badd027b0f7257a104d72e5703ea1fa69073488b3c842703647ea7b7eda19de7843ee4a0513f1d0f2dc3918a798cf051d24647469c400b3f5ab8d210c52bb8ca64426e6c17115fe235f4bd09caeb14eca724783f824b9d20227b2ad703c7eae1652783d3e99589e18526e7ec86830c50b0a69a44d686953401a383cea11afa04d18ffc9fcde5714eab1b9988f59413cc31126a2eed1b1805012b0be250bab1f3ecb4e386eeef40c73c3dd0d865f32679661ba3b975bb86296d41418a40832f173539a1d807b3a237db2835677d85a8ba195eb05ed81ef3140d2561fc8872f7dcb78a8013dc39e7c8b3e2e403b4a492c323a64578c74ecf01f541cc4372260ed74a0045b1da2bdf50b0c04b2c7c40242794325a38b6798a8f072662d55848b28c857d9d509fee5e9a4e8567ccff7c1729e245a0871c47373e6d5", 0x1000, 0x2, 0x0, 0x0, r2}, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:32 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) r2 = dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000e26000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 23:29:32 executing program 7: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mq_timedsend(r0, &(0x7f00000003c0)="4fd80e9f1eeb06e5e9b75a2c6bb64ae23d10aa8d8e0c04bef4f510fde21a38f86c831197dae219b4d3d77a5cc572f25eab50bfb4e2f848cc21807903383b29ff13dd", 0x42, 0x1, &(0x7f0000000280)) r1 = socket$inet6(0xa, 0x2, 0x300000088) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f00000003c0)}, 0x0) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r2 = socket$inet6(0xa, 0x800, 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x208203b6db141cf5, &(0x7f0000000440)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000240)=0x8) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x3, 0x1, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r2, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:32 executing program 2: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = getuid() setuid(r1) 23:29:32 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x200000000000000c) 23:29:32 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x101002) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "4354129537621aa4d679c17eeb4ff2ce704eb32cc543a6f9cf74864bc0c6aa330620ca174acd597eedab1a08eb089ef36b500ee9136e17483a6da22e0337e9fcede48b7691666a97c7b99da8075366076cb55a554f192f899ef9457de9a886fa3313dfbe0ce4ff7ec566fa55ef993b2efe9b3c74d923de4e85d11497dd276778092b8b5d77d771742cb28cf81ad14106cf85de8f69600f458719a7c5eeb6e47273fe1987ba341624d6cbc51e492cd0d8cd78420326a0e08131d90ad20bb3c270d1107270e7bf62bac577ed2f34160b6b72120344a323f53cebe3c8b1bd74c2a8746e070bc9ff6a470df7bc5da700f11b70478cebd0"}, 0xf9) 23:29:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) mq_unlink(&(0x7f00000002c0)='&wlan0eth0\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) r2 = msgget$private(0x0, 0x10) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/43) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) [ 437.759184] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 437.759184] program syz-executor5 not setting count and/or reply_len properly [ 437.836176] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 437.836176] program syz-executor5 not setting count and/or reply_len properly 23:29:32 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) madvise(&(0x7f00004a6000/0x2000)=nil, 0x2000, 0x6f) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:32 executing program 2: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mbind(&(0x7f0000f2f000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000003c0)=0xd, 0x0, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'yam0\x00', r1}) madvise(&(0x7f0000797000/0x2000)=nil, 0x2000, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xe4c8, 0x0, 0x8, 0x1f, 0x90}, &(0x7f0000000380)=0x98) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000200)={0xbb5, 0xffff, 0x3ff, 0x9}) 23:29:32 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200100, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000280)}, {&(0x7f0000000340)='A', 0x1}], 0x2) r4 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0xc1105517, &(0x7f0000001000)) 23:29:33 executing program 6: mremap(&(0x7f0000e81000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f000060c000/0x2000)=nil) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc)=0x426, 0xffffffffffffffd2) socket$unix(0x1, 0x5, 0x0) mremap(&(0x7f0000f93000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ec7000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) shmget(0x2, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) 23:29:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000080)=0xfffffffffffffff9, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:33 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:33 executing program 2 (fault-call:3 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) [ 438.072323] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 438.072323] program syz-executor5 not setting count and/or reply_len properly 23:29:33 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0xffffffffffffffff, &(0x7f00004b4000/0x2000)=nil) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xc5fe, 0x8000) setsockopt$inet_int(r0, 0x0, 0x1e, &(0x7f0000000040)=0x7e3, 0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:33 executing program 0: r0 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000200), 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) r1 = fcntl$getown(r0, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x191800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000100)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="01b9574e290d78ed7a239d1f9409bb6af3a2334a73dfd409afcd674be023d63620a4fbe6daf40c06ccdaab231748de9b3a4c78c5e870a1b3078606b0b945ea05273d"], 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xad9b, 0xfffffffffffffffe, 0x1f, 0x10000, 0x0, 0x100, 0xb01, 0x1, 0x3f, 0xfff, 0x1, 0x2, 0x9, 0x809, 0x2, 0xffffffffffffffff, 0x2, 0x8000, 0x3, 0x3, 0x4, 0x7, 0x7, 0x0, 0x6, 0x8001, 0xb8, 0xa0000000, 0x4, 0x401, 0x4, 0x81, 0x10000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x8000, 0x2, 0x40, 0x6, 0x7, 0x6, 0x7c4a418d}, r1, 0xa, r0, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) getrandom(&(0x7f0000000140)=""/5, 0x5, 0x2) 23:29:33 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x1000, 0x3, &(0x7f0000f98000/0x1000)=nil) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) fchown(r0, r1, r2) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 438.195383] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 438.195383] program syz-executor5 not setting count and/or reply_len properly [ 438.196038] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 438.196038] program syz-executor2 not setting count and/or reply_len properly [ 438.357389] FAULT_INJECTION: forcing a failure. [ 438.357389] name failslab, interval 1, probability 0, space 0, times 0 [ 438.368913] CPU: 0 PID: 22332 Comm: syz-executor2 Not tainted 4.17.0+ #18 [ 438.375865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.385240] Call Trace: [ 438.387884] dump_stack+0x185/0x1d0 [ 438.391586] should_fail+0x87b/0xab0 [ 438.395423] __should_failslab+0x278/0x2a0 [ 438.399697] should_failslab+0x29/0x70 [ 438.403638] __kmalloc+0xbe/0x350 [ 438.407123] ? bio_copy_user_iov+0x225/0x1570 [ 438.411659] bio_copy_user_iov+0x225/0x1570 [ 438.416041] ? kmsan_memcpy_origins+0xf1/0x170 [ 438.420694] blk_rq_map_user_iov+0x4e4/0xcb0 [ 438.425157] blk_rq_map_user+0x1f9/0x260 [ 438.429267] sg_common_write+0x2ba1/0x3ad0 [ 438.433575] ? sg_common_write+0x2a91/0x3ad0 [ 438.438027] sg_write+0x14d9/0x15b0 [ 438.441763] ? kmsan_set_origin_inline+0x6b/0x120 [ 438.446666] ? kmsan_set_origin_inline+0x6b/0x120 [ 438.451563] ? __msan_poison_alloca+0x15c/0x1d0 [ 438.456290] ? vfs_write+0x467/0x8c0 [ 438.460079] ? __vfs_write+0xc9/0x9f0 [ 438.463935] ? vfs_write+0x467/0x8c0 [ 438.467666] ? sg_read+0x3420/0x3420 [ 438.471427] ? sg_read+0x3420/0x3420 [ 438.475159] __vfs_write+0x1aa/0x9f0 [ 438.478962] vfs_write+0x467/0x8c0 [ 438.482573] __x64_sys_write+0x1bf/0x3e0 [ 438.486672] ? ksys_write+0x360/0x360 [ 438.490477] do_syscall_64+0x15b/0x230 [ 438.494406] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 438.499595] RIP: 0033:0x455ab9 [ 438.502775] RSP: 002b:00007f79a09f2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.510485] RAX: ffffffffffffffda RBX: 00007f79a09f36d4 RCX: 0000000000455ab9 [ 438.517761] RDX: 0000000000000314 RSI: 00000000200001c0 RDI: 0000000000000013 [ 438.525054] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 438.532348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 438.539612] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000000 23:29:33 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23, 0xfffffffffffffc00, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x14) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:33 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x6f, &(0x7f00000010c0), 0x4) r0 = socket$rds(0x15, 0x5, 0x0) recvfrom(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x10000, &(0x7f0000001040)=@nfc_llcp={0x27, 0x0, 0x2, 0x5, 0x6, 0xffff, "1f8f840b4199489a9792dc174075192af95bf79c5a73e6da1c42b3f9502e1bc0cfea83c7f74dcb44db8b2095582cb517c8890d73e8506a7db8339b24b982f1"}, 0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:33 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x8080, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000380)={0xb0, 0xf9, 0x2, "dcc529a70f9aee13f6bbd777a90b7c302dd8687eb10fc659b5206e2e8b5adbba77eab51f18f4f17c7bbb097c091fa8c7a202bc713d9140055d25e9cb17af09ea14e7d6e4819836cf25ad820e1351d26bb12161eeb7fe9487316870f93804370203583bf71b570197de8bc14604d33f08ea2404cac986222e3317b4af2d45c83b13321de2eb1fa8a94a64cdc5bd84683f21f08960410ddf0ea662a3713136a046b83a52a3db7c542c572bfa56d5056e44"}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000002c0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', r3}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000000)) 23:29:33 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) prctl$setmm(0x23, 0x0, &(0x7f00004a4000/0x1000)=nil) 23:29:33 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000fbc000/0x1000)=nil, 0x1000, 0x0) 23:29:33 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:33 executing program 2 (fault-call:3 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) [ 438.840698] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 438.840698] program syz-executor5 not setting count and/or reply_len properly [ 438.862617] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 438.862617] program syz-executor2 not setting count and/or reply_len properly [ 438.883295] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 438.883295] program syz-executor5 not setting count and/or reply_len properly [ 438.919333] FAULT_INJECTION: forcing a failure. [ 438.919333] name failslab, interval 1, probability 0, space 0, times 0 [ 438.930790] CPU: 1 PID: 22367 Comm: syz-executor2 Not tainted 4.17.0+ #18 [ 438.937741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.947115] Call Trace: [ 438.949751] dump_stack+0x185/0x1d0 [ 438.953444] ? __x64_sys_write+0x1bf/0x3e0 [ 438.957777] should_fail+0x87b/0xab0 [ 438.961546] __should_failslab+0x278/0x2a0 [ 438.965832] should_failslab+0x29/0x70 [ 438.969755] __kmalloc+0xbe/0x350 [ 438.973242] ? bio_alloc_bioset+0x73/0xd30 [ 438.977512] ? bio_alloc_bioset+0x585/0xd30 [ 438.981875] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 438.987293] bio_alloc_bioset+0x585/0xd30 23:29:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r2 = getpid() r3 = getpgrp(r2) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000000280)=0x18) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x80, @mcast1={0xff, 0x1, [], 0x1}, 0x3f}, @in6={0xa, 0x4e20, 0x7, @empty, 0x6c4}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xb4c4}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x14}, 0x1f}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @rand_addr=0x7}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x34ce1fd8}, 0x80000001}], 0xcc) sched_setattr(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3, 0xf9ae}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x40}, {r1, 0x4}, {r0, 0x180}, {r1, 0x1000}, {r1, 0x20}, {r0, 0x4002}, {r1}], 0x7, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={0x3}, 0x8) [ 438.991477] ? kmsan_memcpy_origins+0xf1/0x170 [ 438.996130] bio_copy_user_iov+0x484/0x1570 [ 439.000537] blk_rq_map_user_iov+0x4e4/0xcb0 [ 439.004999] blk_rq_map_user+0x1f9/0x260 [ 439.009105] sg_common_write+0x2ba1/0x3ad0 [ 439.013403] ? sg_common_write+0x2a91/0x3ad0 [ 439.017850] sg_write+0x14d9/0x15b0 [ 439.021567] ? kmsan_set_origin_inline+0x6b/0x120 [ 439.026461] ? kmsan_set_origin_inline+0x6b/0x120 [ 439.031349] ? __msan_poison_alloca+0x15c/0x1d0 [ 439.036074] ? vfs_write+0x467/0x8c0 23:29:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011ec9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264e285d0b542e2b00dc641d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc0000000000f260eaf02ccada4dcfec9e59ae7831135e96fe1205f032b3c3bf40fa2edb604baabf42247c3d08362ec2a86093f7c1ba67b92be2e86ec9aa811827309ca7504d5959a26ea97bd239ad6d25e959"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc)=0x4, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 439.039851] ? __vfs_write+0xc9/0x9f0 [ 439.043712] ? vfs_write+0x467/0x8c0 [ 439.047477] ? sg_read+0x3420/0x3420 [ 439.051243] ? sg_read+0x3420/0x3420 [ 439.055040] __vfs_write+0x1aa/0x9f0 [ 439.058851] vfs_write+0x467/0x8c0 [ 439.062462] __x64_sys_write+0x1bf/0x3e0 [ 439.066574] ? ksys_write+0x360/0x360 [ 439.070408] do_syscall_64+0x15b/0x230 [ 439.074340] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 439.079587] RIP: 0033:0x455ab9 [ 439.082796] RSP: 002b:00007f79a09f2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 23:29:34 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x84a92f08ae9dda71, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2280, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x40064, &(0x7f0000000100)=0x9, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000587000/0x3000)=nil, 0x3000, 0x8) [ 439.090548] RAX: ffffffffffffffda RBX: 00007f79a09f36d4 RCX: 0000000000455ab9 [ 439.097878] RDX: 0000000000000314 RSI: 00000000200001c0 RDI: 0000000000000013 [ 439.105180] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 439.112484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 439.119782] R13: 00000000004c27b0 R14: 00000000004d40b8 R15: 0000000000000001 23:29:34 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = inotify_init() r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_open_pts(0xffffffffffffffff, 0x400000) r3 = epoll_create1(0x1) r4 = socket$pppoe(0x18, 0x1, 0x0) epoll_create1(0x80000) r5 = epoll_create1(0x80000) r6 = eventfd2(0x2, 0x80001) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r8 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x5, 0x440) r9 = socket$inet(0x2, 0x1, 0xfb) poll(&(0x7f0000000100)=[{r0, 0x40}, {r1, 0x3}, {r2, 0x1000}, {r3, 0x10}, {r4, 0xd092}, {r5, 0x4008}, {r6, 0x9}, {r7}, {r8, 0x4}, {r9, 0x4}], 0xa, 0x4f3) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r10 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x40000) ioctl$sock_SIOCGIFBR(r10, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x40, 0x8}) madvise(&(0x7f0000850000/0x4000)=nil, 0x4000, 0x0) getcwd(&(0x7f0000000180)=""/4096, 0x1000) getuid() ioctl$SNDRV_TIMER_IOCTL_STOP(r10, 0x54a1) 23:29:34 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) 23:29:34 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) lchown(&(0x7f0000000400)='./file0\x00', r0, r1) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 23:29:34 executing program 2 (fault-call:3 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:34 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000087) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0xffffffffffffff7f, 0xa19, 0x395154480a014a47, 0x4, 0x1, 0x7fffffff, 0x3, 0x8, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={r1, 0x8, 0x20}, &(0x7f00000003c0)=0xc) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000240)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0xfffffffffffffd9a, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x4056002, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0xffffffffffffff36) recvmmsg(r0, &(0x7f00000020c0)=[{{&(0x7f0000000440)=@l2, 0x80, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x4, &(0x7f00000016c0)=""/50, 0x32, 0x6}, 0x4}, {{&(0x7f0000001700)=@nl, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001780)=""/180, 0xb4}, {&(0x7f0000001840)=""/144, 0x90}, {&(0x7f0000001900)=""/74, 0x4a}, {&(0x7f0000001980)=""/167, 0xa7}], 0x4, &(0x7f0000001a80)=""/66, 0x42, 0x40}, 0x68}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001b00)=""/249, 0xf9}, {&(0x7f0000001c00)=""/14, 0xe}, {&(0x7f0000001c40)=""/188, 0xbc}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x4, &(0x7f0000001d40)=""/247, 0xf7}, 0x8}, {{&(0x7f0000001e40)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/94, 0x5e}, {&(0x7f0000002000)=""/177, 0xb1}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x4, &(0x7f0000001f80)=""/37, 0x25, 0x8000}, 0x5}], 0x4, 0x2, &(0x7f00000021c0)={0x0, 0x1c9c380}) sendmsg$inet_sctp(r2, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46ade9fcbb11e46f3000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d7a18148d3d1ce03196b94259f11defb96bca323ca1cddce779305597cd1e0e0b430063bfb07acddd6ef9ea1191dab4fed77a99b479b5571427b2038e02a1264c285d0b542e2b00dc623d8dbbe7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d553cdefb34d55b034031a8943a8e90bc"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x10400) 23:29:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)="9b68d4e108a8660a61ae70c4bf1e1c22c28d821a86e0916af46a10e514201cb5946c97536a1c3208972d6691fc67da6913c102365b6b01bea53172306bb5536f8c2b3d0c7a4d5b0124f05c9185bca9bbd7086010382aeef28106796ab420089ab655408e089b99715e7b251df14e580945af0d774b2ed67ec5ef7efe9e4e4ec133add1c74a7d0086229e6a40bb8978cdf912e239813d4fa819c33ceecb5f061e939ac171d53c04b25a80be720bfde4f77751e1309202e3bacd09229b3d1abbe7a23a149b9c8e29419a6485952ddf73138bb37624f07aeaa39a5efcc583cfe32d825b52bd555be980374058add246ee23e248", 0xf2, r2) 23:29:34 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) clone(0x0, &(0x7f0000000000)="c94c9f51db30dfac6c754b12ed6637f8dc", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='net/route\x00') getsockname(0xffffffffffffff9c, &(0x7f00000011c0)=@hci={0x0, 0x0}, &(0x7f0000001240)=0x80) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000001280)={@mcast2={0xff, 0x2, [], 0x1}, r1}, 0x14) 23:29:34 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x1000000000005) 23:29:34 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) 23:29:34 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d061eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/rfkill\x00', 0x20283, 0x0) ioctl$sock_proto_private(r2, 0x89ef, &(0x7f00000002c0)="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") write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000)=[{r1, 0x20}, {r1, 0x4000}, {r1, 0x8010}, {r0, 0x6008}, {r0, 0x1}, {r1, 0xa23c}, {r0, 0x4}], 0x7, 0x3) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080), 0x2) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x800, 0xa0441) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:35 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)="2f7051b1cf9ae6ea67b8f5bf726f632f7379732f616668655f62797061737300", 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), 0xffffff27) mremap(&(0x7f0000e9f000/0x4000)=nil, 0x4000, 0x2000, 0xffffffffffffffff, &(0x7f0000537000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) fcntl$setstatus(r0, 0x4, 0x2800) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 23:29:35 executing program 6: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x42) setsockopt$inet6_udp_int(r0, 0x11, 0x80, &(0x7f0000000040)=0x2, 0xffffffffffffff19) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x475f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x801) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:35 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r0) 23:29:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x190a, 0x1) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2ec) 23:29:35 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r2 = request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000003c0)='em0\x00', 0xfffffffffffffff8) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r2) socket$inet6(0xa, 0x80000, 0x9) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) [ 440.196277] program syz-executor2 is using a deprecated SCSI ioctl, please convert it to SG_IO 23:29:35 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000029c0)={0xffffffffffffff9c}) setsockopt$inet6_udp_int(r0, 0x11, 0xd, &(0x7f00000000c0), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") r4 = inotify_init() r5 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$evdev(r1, &(0x7f0000002f80)=[{{0x77359400}, 0x0, 0x5, 0x3}], 0xfffffffffffffe4f) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x80000002) ftruncate(r5, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x10000, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r6) mremap(&(0x7f0000e90000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000e8e000/0x4000)=nil, 0x4000, 0x7) setsockopt$inet_tcp_int(r2, 0x6, 0x3f, &(0x7f0000000100)=0x10001, 0x4) 23:29:35 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 23:29:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f450400000000000000ffff0300ffff00000000000000000000000000190000c18b682670f718b6b833e1eb2dbc8af300c04d6f07218da8ef373018966d00000000000000080000000000380000000000000000003012474638e7fd6eabc2b868a2542753b762c3d7603508ec00a56fc8f221b563ca1120c7e0ddba25bd3070195db680332eb648c6e2a583fa39ae5d1e583adf21678f820bc4b325e6ecf472260988"], 0x314) 23:29:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000280), 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:35 executing program 4: uname(&(0x7f0000000200)=""/246) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = semget$private(0x0, 0x1, 0x403) semctl$IPC_INFO(r0, 0x2, 0x3, &(0x7f0000000100)=""/209) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8008) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) 23:29:35 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 23:29:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000030009b35cb446d79d227f6017bd6dfc7dfa1a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd0714783286e3d5e1417c1d70931611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc87b3d4cd5ac586cec5134d1979a852ff3c75c4c36273b540bc4b378785c4f7ced84a7f34385a25737676539a847542860e45c89ea174ba04060e4d90a02a6769f58d4db3c95b01748d6eaeee79a536902cada67e9f3bd121bb6b8f2e19d16f6f09d891eb7fe830927d01b2c5a4e54cbbb25e4d4eefb6751ac0bbc796"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:35 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = socket$netlink(0x10, 0x3, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2c000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x200, 0x70bd26, 0x25dfdbfd, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) madvise(&(0x7f0000f1c000/0x2000)=nil, 0x2000, 0x8) 23:29:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x803, 0x100000001) sendmmsg(r1, &(0x7f00000038c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000400)}}], 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f00000001c0)=0x482, 0x4) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x1268, 0x4) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/160, 0xa0}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x100, 0x0) ioctl$TCXONC(r0, 0x540a, 0xe02) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) time(&(0x7f0000000080)) 23:29:35 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x1b) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000001280)={@remote, 0x0}, &(0x7f00000012c0)=0x14) r2 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001300)={{{@in6, @in6, 0x4e23, 0x100000000, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x4, r1, r2}, {0x2, 0x4, 0x4e0, 0x4, 0x7ff, 0x6, 0x1, 0xff}, {0x7f, 0x81, 0x3, 0x8}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in=@loopback=0x7f000001, 0x4d5, 0xff}, 0x2, @in=@multicast1=0xe0000001, 0x3502, 0x2, 0x0, 0x4, 0xffff, 0x0, 0xffff}}, 0xe8) 23:29:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) 23:29:35 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x480000, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f00000002c0)={0x4, 0x9, 0x4, {0x77359400}, 0x2, 0x1}) 23:29:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x0, 0x70bd28, 0x25dfdbff, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40844) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:36 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x101840) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000240)={0x9, 0x2, 0x7fffffff, 0x776}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) socket$packet(0x11, 0x3, 0x300) 23:29:36 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.evm\x00', &(0x7f00000002c0)='GPL)*/\x00', 0x7, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) move_pages(r0, 0x9, &(0x7f0000000100)=[&(0x7f0000f3c000/0x1000)=nil, &(0x7f0000f2d000/0x2000)=nil, &(0x7f0000f81000/0x1000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000e20000/0x2000)=nil, &(0x7f0000f84000/0x3000)=nil, &(0x7f0000fc0000/0x1000)=nil, &(0x7f0000f08000/0xa000)=nil, &(0x7f0000f25000/0x4000)=nil], &(0x7f0000000180)=[0x10000, 0x8, 0xf150], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x20000000000008) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x5, 0x100) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000780)={0x68bc, 0x7f}) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0)={0xffffffff}, 0x400000000000341, 0x5}}, 0xffffffffffffff4e) accept(r1, &(0x7f0000000300)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f00000004c0)=0x80) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000380)={0xf, 0x8, 0xfa00, {r4, 0xd}}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000680)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6, 0x4e23, 0x81, 0x5, 0x1, 0x2, 0x80, 0x20, 0x6c, 0x0, r6}, {0x7, 0x3, 0x401, 0x9ff, 0x1, 0x1, 0x2}, {0xc7e0, 0x101, 0x5, 0x9}, 0x2, 0x6e6bc0, 0x3, 0x1, 0x1, 0x3}, {{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x4d5, 0xff}, 0x2, @in=@broadcast=0xffffffff, 0x3501, 0x3, 0x1, 0x80000, 0x1, 0x79742b10, 0x8}}, 0xe8) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x200, @local={0xfe, 0x80, [], 0xaa}, 0x80000001}, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x1c}, 0x8}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e21, @rand_addr=0xffff}, @in6={0xa, 0x4e23, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x8000}, @in6={0xa, 0x4e21, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x7fffffff}], 0xa0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="8ae9253f05cbe47eb9e41a968a3e10bab5e3a12eb5f47d3df2a6", @ANYRES16=r7, @ANYBLOB="120327bd7000fedbdf2509004229bd7a040008000000080006004ba0000014000100080002005c000000080002002100000038000100080005000000000008000800ff7f0000080005000100000008000b00736970000c00070009000000040000000800050003000000fe95d5fae975f137db3e43742596c8473acf6ba5c8094cf79eac344b271545ddb526b9a346d5ac6dbd8dbce31be0118d2fc3eeda"], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x4) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000005c0)={0x20000000}) getsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff10) 23:29:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) 23:29:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) delete_module(&(0x7f0000000000)='ppp1]\x00', 0xa00) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000340)) 23:29:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:36 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80800) fcntl$setlease(r0, 0x400, 0x0) 23:29:36 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000040)=0x14) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x4e20, 0x0, 0x4e22, 0x78c5, 0x2, 0x20, 0xa0, 0x6f, r1, r2}, {0x8, 0x2, 0x9f9, 0x5, 0x7, 0xffffffffffff13f5, 0xfffffffffffffdc4, 0x7}, {0x5, 0x6, 0x0, 0x5b4}, 0x9, 0x0, 0x2, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xc}, 0x4d2, 0xff}, 0xa, @in6=@loopback={0x0, 0x1}, 0x3503, 0x2, 0x3, 0x5, 0x3, 0x47e, 0x661}}, 0xe8) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xc17, 0x8000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x7fff, 0x4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000300)={r4, 0xa9, "62a20f08fa6866314bc04b30e5d9d252b153211d0ff93eeea4c4f1b7e1d84c8830515b5042d2a49e73e3b643f73d44da1d5eed1d75145affeaea4c8b2bfe8fe70de160bf4fe8cf76f16a585ff82597fdb9c8b661c7d9018730834903405a6cb9ce027585ca917f1a06649cce3303880efee3d917683c47a4ff06404ffbdd2f8b9e32e795ccc516e471b05daea2c54e4307d9642be0d619cecca014ffb833670514a88eac5822fd4c69"}, &(0x7f00000003c0)=0xb1) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0xb) 23:29:36 executing program 2: faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x200) shmget(0x3, 0x1000, 0x11000, &(0x7f0000ffc000/0x1000)=nil) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff0000000000000000000000000000000082000000000000000000000000f9000000000000000000000000000000000000"], 0x314) 23:29:36 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) 23:29:36 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x9c) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/116, 0x74}, {&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000200)=""/18, 0x12}], 0x6) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) 23:29:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f00000002c0)={r1, r2+30000000}, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r3, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:36 executing program 6: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x900) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xff, 0xfff, 0x3, 0xfff, 0x3881, 0x80000001, 0x0, 0x1ff, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e21, 0xfffffffffffffffc, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x16}}, 0x1}}}, 0x84) 23:29:36 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000001280)='/dev/audio#\x00', 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x9) 23:29:36 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0xfffffffffffffffc, 0x10001, 0xa431, {0x77359400}, 0x81, 0xfff}) 23:29:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:37 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup3(r0, r1, 0x80000) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0xd7ce73f900984393) 23:29:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) 23:29:37 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x1000000006) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000000, 0x111000) 23:29:37 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffffdd, 0x400800) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffff}, 0x2, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7, 0xffffffffffffffb0, {"0618dd5ad5f7fa834731751787c08eec"}, 0x9, 0x9}}}, 0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) connect(r0, &(0x7f00000001c0)=@xdp={0x2c, 0x4, r2, 0xb}, 0x80) 23:29:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) 23:29:37 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000)=0x1, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) pipe(&(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="040000002400000003000000060000000100000004000200070000000008000080000000fd000000e5000000"]) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0xffffffffffffffff) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:37 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0xf) 23:29:37 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x149000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000000c0)={0x7, 0x7, 0x0, 0xa0, 'syz0\x00', 0x2}) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x668}}, 0x18) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/188, 0xffffffffffffffab}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000000000)) 23:29:37 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) 23:29:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) r2 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x8, 0x200020c100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x83, "1c5ba4be073840db6aa259ab39426aca3e9d91d6f9103ca4385b027e6678213ba33363c32b46ed90e7d6fc281912363d7e83cc769fd6fcb9f0d247fae5de7af1838e1c8ebbb520ca910052d1b726f7689d8cfe5cb8a4c5643e97b5b38a5b3e016af1fd3a8725d06e43b5251b641694ff8c5ed346a94bed4e9b58aef9ca1ab68be837ec"}, &(0x7f0000000380)=0x8b) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000003c0)={r3, 0x8, 0x100000001, 0x2, 0x81, 0x4}, 0x14) 23:29:37 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='{ppp1}bdevppp0}posix_acl_accessselinuxvboxnet1trusted\x00'}, 0x10) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/177) ioctl$FICLONE(r0, 0x40049409, r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40, 0x0) madvise(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x8) [ 442.312220] sg_write: 22 callbacks suppressed [ 442.312247] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 442.312247] program syz-executor2 not setting count and/or reply_len properly 23:29:37 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) shmget$private(0x0, 0x2000, 0x308, &(0x7f000083d000/0x2000)=nil) [ 442.419716] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 442.419716] program syz-executor5 not setting count and/or reply_len properly 23:29:37 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001400)='/dev/rtc0\x00', 0x2000, 0x0) socketpair(0xf, 0x3, 0x20, &(0x7f0000001440)) socketpair$inet6(0xa, 0x80a, 0x6, &(0x7f0000001480)) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) creat(&(0x7f00000014c0)='./file0\x00', 0x10) r1 = socket(0x15, 0xe, 0x101) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000c29ffc)=0x200000, 0xdf19f273) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000, 0x7, &(0x7f00004b4000/0x2000)=nil) [ 442.512148] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 442.512148] program syz-executor5 not setting count and/or reply_len properly 23:29:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x701181, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000200)={0x3, 0x6, 0x3, 0x10001, [], [], [], 0xffffffffffffffc0, 0xfffffffffffffeff, 0x38, 0x8, "fe65cff23d4fc11afb5aa18ad69888e8"}) 23:29:38 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000240)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f00000003c0)=""/155, 0x9b}], 0x2, &(0x7f0000000480)=""/233, 0xe9, 0xa4}, 0x1) r2 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x7f, 0x482) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8000) 23:29:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) 23:29:38 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc) clock_getres(0x7, &(0x7f0000000280)) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@nfc, &(0x7f0000000440)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000480)={0x7}, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000004c0)=0x0) capget(&(0x7f0000000500)={0x39980732, r3}, &(0x7f0000000540)={0x6, 0x9, 0x100000000, 0x80000001, 0x7ff, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0xffffffffffffff60, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffff}, 0x114, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r4, 0x3}}, 0x18) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000300), &(0x7f0000000380)=0x4) 23:29:38 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = msgget$private(0x0, 0x4) r1 = dup(0xffffffffffffff9c) accept4$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, &(0x7f0000000b80)=0x14, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000bc0)={@remote={0xfe, 0x80, [], 0xbb}, 0x40, r2}) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000080)=""/224) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) io_setup(0x7fff, &(0x7f0000000180)=0x0) r4 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x28280, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001980)='/dev/vcs\x00', 0x2000, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self/net/pfkey\x00', 0x400, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/rfkill\x00', 0x90000, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) r11 = eventfd2(0x6, 0x1) r12 = syz_open_dev$dspn(&(0x7f0000002bc0)='/dev/dsp#\x00', 0xdb, 0x301000) r13 = syz_open_dev$adsp(&(0x7f0000002cc0)='/dev/adsp#\x00', 0x200, 0x800) io_submit(r3, 0x5, &(0x7f0000002d40)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x80, r4, &(0x7f0000000200)="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", 0xfe, 0x10000, 0x0, 0x0, r5}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x7, 0x8, r6, &(0x7f0000001900)="727c2d7849ac7c4313dfc506bb5762267098bc2ec2a90ccebbb72fae949d2e11321679f1644637a0958d27a8a374a6afdc1d0c9c55b8d16c64a5e957d15a400dcca9fa571826ed82d011ed274ae9ff48555ac60141408951e46c4abbf43dd529921d28", 0x63, 0x1, 0x0, 0x0, r7}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x2, 0x96de, r8, &(0x7f0000001a40)="4c577cedf5986b968b83c3c391c1b3113b0c5d8d2c27228bf0e1971446649364184da1cb24e24f74f05941fdf1cd4831d263a4b02093aa29275e7fb7c25e5d8d4760b15fcd9a3828505b41c8c9d90198b5abc8bbea1d50937e231e1eaa33eeacb375296c06c4d7cfb6ee24147c2bfcb327704b8f3898d460c8cdc90ff23f53b80021d75781fd4e92f9fcc47782dd858b67c93e02a703fb", 0x97, 0x1, 0x0, 0x1, r9}, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f0000001b80)="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", 0x1000, 0x3ff, 0x0, 0x1, r11}, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0xe, 0xfffffffffffffff8, r12, &(0x7f0000002c00)="db127664f2370cc91ee8e8dcab813da1ff48363a5b350e30dce06c882a570a1c6b744204a942766edc1a8e2e4cab9c5a0af846477c4f744604f52d165ecf411d00f5af6a143d22929b937b87246f7c70e770f456a807eba89f935536f3fbd7aaf361ac208cfe8365dd7c27f8a866e7b9df12cd55447893b0cfeea85f6d5d6eeb979ef4807289ed4cb943a3e95bc254693ecd578e", 0x94, 0x9, 0x0, 0x1, r13}]) r14 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) mmap(&(0x7f000068d000/0x3000)=nil, 0x3000, 0x5, 0x29010, r14, 0x0) 23:29:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x800, 0xfff, 0xfff, 0x9, 0x2, 0x3e, 0x5295, 0x373, 0x38, 0x42, 0x200, 0x7, 0x20, 0x2, 0x3, 0x400, 0x1ff}, [{0x6474e551, 0x1da9, 0x3, 0x5, 0xfffffffffa747d74, 0xc4d2, 0x9, 0x4}, {0x7, 0x1, 0x3, 0xfffffffffffffffa, 0x8, 0xfffffffffffffff7, 0x0, 0xc9}], "f3b5ff88152594243da77f7f758e66c4aafdb2f280a46aab2868047a9fac073880e3002473b503533b839318d232feb4e44faaa6dfeff7c16bcfa22ec01cb192894017f67950d052a7bc3ee71c1600c0677ddab700c9cbe5add40f3c807fdf199d45c38fab447e10635f848bfc3d750bd9f3421d6e378395641ea1ac7ca1402de408d1c82f9f5909db713ee4abbe505f61730016456d7debf062e13ef5a80357d61a01d33aa38fa138059f31a8922f7910b128709071a11a2bbd51bb64569cd281d9dffb372fa9596aef99a251144e9805045e17c0ed1c18b47b95e0b2487933f954e0d4908cd3c8b96d01e4e2d2368036ff1551c5", [[], [], [], [], [], [], [], [], [], []]}, 0xb6d) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:38 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x6f, &(0x7f0000000000)=0x20, 0x3a6) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f00000001c0)={0x6, 0x70, 0x206, 0x8, 0xb46e, 0x3, 0x0, 0x100, 0x100, 0x8, 0xff, 0x18b, 0x1000, 0xfffffffffffffd7e, 0x7, 0x6, 0x10001, 0x8a, 0xfffffffffffffff7, 0x20, 0x6, 0x1ff, 0x4, 0x1, 0x6, 0x4, 0x7, 0x3, 0x1, 0x4, 0x3, 0xf35, 0xfff, 0x2, 0x4, 0x165, 0x1, 0x10000, 0x0, 0x10001, 0x6, @perf_bp={&(0x7f0000000180), 0x7}, 0x80, 0x6, 0x3ff, 0x7, 0x9, 0x8, 0x100000000}, r2, 0xe, r1, 0x8) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x400, 0x0, 0x200000}, &(0x7f0000001000)=0xfffffffffffffec7) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)={r3, 0x0, 0x96, "2fbcbdcc50538b4e10191d1cf612cee5daf3eebeb823f6e09a6e1117f9aab01bc05be44fcaf56e719b2be36ee4efe9890b14dc621269253fe91248078e5ab463158f795543a9dbe427f20cf468206c74e6ee9226a03a30c4ed20c170e93e8308505489bcedf8e18ce2175978a66b73bef1e0ae19d639c20a534f0d83e44a4e73da45841abc8d6b5d9b81a39a51752dd86ff318c33b01"}, 0x9e) [ 443.143269] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 443.143269] program syz-executor5 not setting count and/or reply_len properly [ 443.172499] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 443.172499] program syz-executor2 not setting count and/or reply_len properly 23:29:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x1) 23:29:38 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000582000/0x2000)=nil, 0x2000, 0x8) [ 443.243978] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 443.243978] program syz-executor2 not setting count and/or reply_len properly [ 443.266754] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 443.266754] program syz-executor5 not setting count and/or reply_len properly 23:29:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000001080)=""/4096, 0x1000) r2 = accept4(0xffffffffffffffff, &(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f00000005c0)=0x80, 0x80000) getpeername$unix(r2, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) execveat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)='*ppp0%%@em0$\x00', &(0x7f00000001c0)='}#%procmime_type\x00', &(0x7f0000000200)='{&}\x00'], &(0x7f0000000300)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00'], 0xc00) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/188, 0xbc}], 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1}, &(0x7f0000001000)=0x18) flistxattr(r1, &(0x7f00000006c0)=""/168, 0xffffffffffffff28) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r4 = geteuid() sendmsg$nl_netfilter(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x10, 0xb, 0x4, 0x70bd29, 0x25dfdbfd, {0xf, 0x0, 0x2}, [@nested={0x14, 0x2c, [@typed={0x8, 0x4d, @uid=r4}, @typed={0x8, 0x18, @str='\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 23:29:38 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000796000/0x1000)=nil, 0x1000}, 0x1}) [ 443.394994] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 443.394994] program syz-executor3 not setting count and/or reply_len properly 23:29:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x1) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x314) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x8001, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xfffffffffffffc01}, {0xa, 0x4e23, 0x617d, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffff0000}, 0x7, [0xa0, 0xdb3, 0x8, 0x5b1b1d13, 0x8001, 0xfffffffffffffffd, 0x94, 0x6]}, 0x5c) 23:29:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4ca76b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000002c0)=0x400) 23:29:38 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = pkey_alloc(0x0, 0x2) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x840, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000000c0)) pkey_mprotect(&(0x7f0000533000/0x2000)=nil, 0x2000, 0x1, r0) 23:29:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x402, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000079c0)={@ipv4, 0x0}, &(0x7f0000007a00)=0x14) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000007a40)={@dev={0xfe, 0x80, [], 0xc}, 0x10, r3}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[{0x0, 0x6}, {0xc, 0xff}, {0x8, 0x16a48000000}, {0x4, 0x5}], 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r4, 0x6}, &(0x7f0000000180)=0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:38 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000775000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x8281) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000040)=""/7) 23:29:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) [ 443.543478] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 443.543478] program syz-executor5 not setting count and/or reply_len properly [ 443.556885] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 443.556885] program syz-executor2 not setting count and/or reply_len properly 23:29:39 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x8, 0x100) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000580)="3ec93352cf953b5609913c09378ff1eaca26ba318da037ec2e567547f6852fa75604c074aee2e48971016fc0438d036b8442e3ee9a0c1687006d241b617297c5094fddd68763f2ed187df672c69213c72865608e842c1b31921a1ede2d9effc97cdd3b466d13dfb42d5740321fbdc13e42907c9d3f2eb65bd0deae5516b84ec11d38bebeacde372b35ed6530beae1d7e444656edecc96beff8d59dce08") bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r2 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x0, 0x4e24, 0x4, 0xa, 0xa0, 0x20, 0x2b, 0x0, r2}, {0x6, 0x7, 0x6469, 0xfffffffffffffff9, 0x6, 0x1, 0x7ff, 0x9}, {0x2, 0x401, 0x9, 0x39d}, 0x6, 0x0, 0x3, 0x1, 0x2, 0x3}, {{@in=@loopback=0x7f000001, 0x4d2, 0x7f}, 0x519d3aa186b4ee8e, @in=@multicast2=0xe0000002, 0x3506, 0x3, 0x3, 0x3, 0x100000001, 0x1f, 0x6}}, 0xe8) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) recvfrom(r3, &(0x7f00000002c0)=""/57, 0x39, 0x160, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x4, 0x1, {0xa, 0x4e23, 0x2, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x12}}, 0x7f}}}, 0x80) listen(r0, 0xf5) sendmsg$inet_sctp(r3, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd395defc5c67a8adce29d95a66cd4fd7822a6dd82d0615e2fc77d2cc07bb96c20c7289e2736e79aba1104e899725365e60ef347479f1f212f4e641bb626519f8c5ee906d436c58e1144cabb59ccdd15356bb8e395244869bb7805fbc18dc8b1df166", 0x184}], 0x1}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20800, 0x0) getsockopt$inet_dccp_int(r4, 0x21, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0x4) 23:29:39 executing program 1: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x1}}, 0xf2, 0x9}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r1, 0x6}, 0x8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x800000000, &(0x7f0000000000)=0x2, 0x1) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x101080) mremap(&(0x7f00005c5000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f000067c000/0x4000)=nil) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x63, "f0130d0b311ae84ae2e8faf3326860a5c16d6f48bec1885ef1575e0dc2ec2a632c0229a8816bafebe456944a7b47e424a040fffe5b09bf51f1482f09cb53057b573b56c2c437e7f8ab4f0a95c5084b5bfc8e086ace8d107006d619f25c6e3377550bf5"}, &(0x7f0000000100)=0x6b) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB="1a0020"], &(0x7f0000000180)=0xe) 23:29:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000040038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf52a6a7077b8d55bc26034ceb2e3cc063ed84397a8a492619eb92972e68bc594a740077456c294ba3201f172eeba27949"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:39 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x480000, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="92454c4600080000000000000000000000000000000082000000000800000000000000000000000000000000380000000000000000006c981678bef1cc67d0355605859db23b8b26b085913b27e32ed9f63dbcef3aebfd949070d8b427e08e42ebe44e993274f6d6ded263d39f09afcf92b9b00a8fe62b6c52ecfd680d8180f2b12b4f9d84040fde2e709490a8df3e9b2e3c1eb7811d6ef44a0294b110b6366c5c9c311da9d9f0ea1698189d703cbe8ceac50027f793f757dcf2fb026771a55b8829a27e4113b5c853b735cf44317009768b6595a8f08501000000000000004a2b5b2f64d5175b552db76b73b4b79200000000000000000000"], 0x314) 23:29:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x80008) r2 = dup(r0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x1, 0x30, 0x1, 0x70}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={r3}, &(0x7f0000000000)=0x18) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:39 executing program 6: socketpair$inet6(0xa, 0x3, 0x8, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x2, &(0x7f0000c29ffc), 0xfffffffffffffe1b) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x60000, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/254) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x50) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000100)='./file0\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/11}, {&(0x7f0000000340)=""/252}, {&(0x7f0000000040)=""/135}, {&(0x7f0000000240)=""/135}], 0x1) r1 = msgget$private(0x0, 0x10) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000001c0)=""/122) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000180)) 23:29:39 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f00007d1000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x7f) 23:29:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x3, &(0x7f0000000200)="295ed8040000000000000082b7b58931b9e4b623e26188a1fb0cea72d1cef91b9b7bdd6545b2e3149b570efcbd3c470abb17528f661e4fe295f02ee5c4e1ac85d7b82b0b25b97c78af541a1f52095e7674a413f0b26dc0789260409751869e48d60c5613c4038d2497bda156c98d84f454de6dd7ec8c92c49f9c864bd72d214b7e7c703272fea4e9b12754c92ae06bce707616b814f84785ff6eae0297368df0d2b814c04e0aec9369fbffd870580a3c65b4df12aa0365dcaa0007") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) prctl$void(0xf) 23:29:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffff8001, 0x14ec0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r5 = socket$inet6(0xa, 0x3, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='sockfs\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e20, 0x19, 0x4e24, 0x6, 0x2, 0x0, 0xa0, 0xff, r3, r4}, {0x3, 0x2, 0x200020000, 0x7, 0xfffffffffffff78b, 0x8, 0x2, 0x3}, {0x1, 0x7, 0xfffffffffffffbff, 0xe01}, 0x3, 0x6e6bbd, 0x2, 0x1, 0x2, 0xffffffffffffffff}, {{@in=@multicast2=0xe0000002, 0x4d6, 0xff}, 0x2, @in6, 0x0, 0x0, 0x3, 0x5, 0x6, 0x2db, 0x101}}, 0xe8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000580)=0x400) 23:29:39 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$inet6_udp_int(r0, 0x11, 0x2, &(0x7f0000c29ffc), 0xfffffe4f) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)}, {&(0x7f0000001180)=""/122, 0x7a}, {&(0x7f0000001200)=""/2, 0x2}], 0x6, 0x0, 0x0, 0x8}, 0x8}, {{&(0x7f00000012c0)=@alg, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/165, 0xa5}], 0x1, 0x0, 0x0, 0x800000000}, 0x8001}], 0x2, 0xd106ff0986442663, &(0x7f00000014c0)={0x77359400}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000001500), 0x4) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000001640)={{&(0x7f0000001540)=""/219, 0xdb}, &(0x7f0000001140), 0x40}, 0x20) mremap(&(0x7f0000f58000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000f26000/0x2000)=nil, 0x2000, 0xf) 23:29:39 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x10000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x3) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000200)={0x3, 0x9}) madvise(&(0x7f0000779000/0x2000)=nil, 0x2000, 0x1d) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008913, &(0x7f0000000280)="290400311f16f477671170ae165872ab3d1d6b50") socket(0x1b, 0x1, 0x6) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200, 0x0) utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fchmodat(r2, &(0x7f0000000100)='./file0\x00', 0x31) r3 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x5, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x100, 0xa, 0x5, 0xfffffffffffffffe, 0xfff, 0xd8, 0x40, 0xffff, 0x1, 0x27, 0x1, 0x2, 0x5, 0x3ff, 0x30fc, 0x4, 0x5, 0xf5e4, 0x10000, 0x81, 0x0, 0x6, 0x6, 0xf409, 0xf80, 0x9, 0x7, 0x2, 0x5, 0x65, 0x0, 0x7, 0x3, @perf_config_ext={0x80000001, 0x7}, 0x210, 0x0, 0x1, 0x7, 0x3, 0xfffffffffffffffc, 0xad0a}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x9) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x7d4b}) socket$bt_bnep(0x1f, 0x3, 0x4) [ 444.581973] program syz-executor2 is using a deprecated SCSI ioctl, please convert it to SG_IO 23:29:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) [ 444.679446] program syz-executor2 is using a deprecated SCSI ioctl, please convert it to SG_IO 23:29:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/66) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x12080, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x2, 0x0, 0x6, 0x0, 0x20}, @map={0x18, 0xf, 0x1, 0x0, 0x1}, @jmp={0x5, 0x404000, 0x6, 0x0, 0x0, 0x20, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x401}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffffffff2e11}], &(0x7f0000000000)='syzkaller\x00', 0x20, 0x29, &(0x7f0000000480)=""/41, 0x41f00, 0x1, [], 0x0, 0x5}, 0x48) r1 = dup2(0xffffffffffffff9c, r0) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x7, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x800, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, {0xa, 0x4e24, 0x2, @loopback={0x0, 0x1}, 0x900}, r2, 0x9}}, 0x48) r3 = socket(0x1e, 0x5, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r4, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f0000000180)="6bc31286ddc239e30472640b2cc9f5ce0bb9026886109ee767da06e0ca1d3a9568dbc4542592d1b3d1fc88f0e21813b8de4966cfeb67e01b", 0x38, 0x8, 0x0, 0x0, r5}]) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl(r7, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000003c0)={r8, 0x800, 0x8, 0x5, 0x3, 0xfffffffffffffffd}, &(0x7f0000000400)=0x14) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000540)={0xf8, 0xffff, 0x7fffffff, "9d72e09bc710ba6c40d5de90bb80baf4505243deef56af62d7d1bf18d237e4dbdf41efa1fd5277c6a503a03d964e0b5eb44224fda2c348aef1999eacad5d5f527497d762f2216ffaa6977aee429de2261a340385b70162bbb43401ab967cd9efedc545fb0aa41138e35a05eebdce0a5198bef6367d3a6f29f7164814f14a2d1026774ef9d75e1200f699b2f8f9df3610e1aa180248680fab5dd29f5b5bb6b4029a82e65858486c028d64913eff8e2c8678609378a4d850511538e16bd5f07e1e1fdc3a12c189359f5d6b0791d4bcc16363b20efab33eeedf790a2cd4eff6ddc66a6bcfa948aa984d85d4ca541849de8b68b21edaef97032f"}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000440)) 23:29:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x9, 0x80) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x1f, 0x19, 0x4, "de67647171327ce14203d5891185b49ed7b743bfb5c680251729f0f1236f6d680c68c2cb68a291494a0afee2dccff4c74e9269f57fc02987b3dbee1cc16b3681", "36f6510e161211a2fb355739cd78ac825cb1a20fa99591533164f6c233d37625e91c43e2b3f5ceb96dea19699e7fa4a9ca5cd9ab7f5ffc64e4617efb3b6f95d8", "1e52527b2a68be96e832ec734ca64cb4adca495710875da9dbec3b1956e93eb0", [0x3d, 0x47bd]}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x7, &(0x7f00004b4000/0x2000)=nil) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x400, 0x101000) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x400) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000100)="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") ioctl$TIOCSTI(r1, 0x5412, 0x6) socketpair$inet6(0xa, 0x8000b, 0x401, &(0x7f0000000000)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x800, 0x0) 23:29:40 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x7, 0x7, 0x8881, 0x0, 0x1}, &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000580)={r2, 0xa, 0x800, 0xbc4, 0x3, 0x6, 0x0, 0x2, {r3, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x12accb8a, 0xe58, 0x8, 0x8001, 0x6}}, &(0x7f0000000640)=0xb0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r4 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='\'[\x00', 0xffffffffffffff9c}, 0x10) setsockopt$packet_buf(r5, 0x107, 0x1, &(0x7f00000003c0)="e16a42bc4d6c6d22d79bccddc933dc32f7d4a0705d020e93e4c5ec5765a54e8747a3b8b1afbb4cfde13790c53f61bf618d77ba339f0917a5c67d351f569ed7835b6a13174dc40ae40bc2dcf95c0f83a7a57ac30c42599b4ddca97140c2a688016fa316a5292e7798b53df5800f48f20768df66caac3f0d3de966af2b23650be237f53067f02ac2fed9628d7961cedeb798eb27620b093a838d1b910c7078909ad004d7fae2382c0c133a28a679ebf8cf501dc614c6627b", 0xb7) sendmsg$inet_sctp(r4, &(0x7f0000000280)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1, 0x0, 0x0, 0x2}, 0x0) 23:29:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00') epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000002c0)={0x20000000}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:40 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200000, 0x0) fchmod(r0, 0x0) 23:29:40 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0x4002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000180)=0x7) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/192) perf_event_open(&(0x7f0000001000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) 23:29:40 executing program 4: madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfff, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="fe0000001f84d79a7b12db1b48814e55ae909a8003793d67afbf42d24e2b4a53d294f00200a288871afee8808e8a295342ac98aa88378012356bc8923c6271ede5a5c12700f27152527d5ada2011b73077c17b982a17ee8565d31ada6e82e67ea6798e9ffeb9ee28e8ab6cfafc8d86e0b20d5dcd879c6edae413381010ccf19feb9c7b9a5e7315f97a72f6a17445f3dc9ab9d2ce0a15b53dc3afb2eef190af48219b0dd9059d8cec4b4fcc1bd1c6c4d7d6d2a620e482e652e40752f2b22742312a7276878e912fc41247386185ca0136add3cfcb739bb2d3c9fae12884c2c82b1d864b61ff6dc1445fb24bfde4a82894244c44f1c2c2e18c17f0580a7354bc00d3e61e7842becebc91347dad0881a8ecf17c7bd7acd754912759e349c0fe8e31d131cea198caeca42d78797fc7"], &(0x7f0000000180)=0x106) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0x3, 0x10001}, &(0x7f0000000280)=0x90) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)={0x3, 0x0, {0xffffffffffffffff, 0x3, 0xffff, 0x3, 0x7}}) 23:29:40 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x480, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setfsgid(r3) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000180)=""/192}], 0x100000000000007d) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x8, 0x10000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) 23:29:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x8000) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:40 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) socketpair$inet6(0xa, 0x0, 0x100, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x2, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) 23:29:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:40 executing program 6: r0 = add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="6f8faf002081b2219582688dc0429cd2982fdc188376365933ba20", 0x1b, 0x0) request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)='\x00', r0) io_setup(0x1, &(0x7f0000000040)=0x0) r2 = socket$netlink(0x10, 0x3, 0x1f) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20890040}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf4, r3, 0x300, 0x70bd26, 0x25dfdbfd, {0x1}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffff8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) io_getevents(r1, 0x8, 0x1, &(0x7f0000000080)=[{}], 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xfffffffffffffffc, &(0x7f0000000000)=0xd9, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:40 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x2, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x189) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='!em1system\'.\x00'}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000001000)=0x18) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x1, r3}) 23:29:40 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = semget(0x0, 0x3, 0x0) semctl$GETZCNT(r2, 0x0, 0xf, &(0x7f0000000200)=""/187) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff0000000096d0000000000000000000000000000000000000000038f1ffffffffffffff00"], 0x314) 23:29:40 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$void(r0, 0xc0045878) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1, 0x8000) r2 = getpid() ptrace$cont(0xf, r2, 0x1ff, 0x7a) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x8a, 0x81, 0x9, 0x100000000, 0x1, 0x8, 0x1, 0x6, 0xff, 0x0, 0x401}, 0xb) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2, 0x40) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0xffffffffffffffc1, 0x1000, 0xffffffff, 0x8001, 0x0, 0x1, 0x2, 0x0, 0xfffffffffffffffc, 0x40, 0xff000000000000, 0x80000001, 0x9, 0x27, 0x6, 0x956, 0x0, 0x3, 0xffffffff, 0x3f, 0x2, 0x2e, 0xffff, 0x8, 0x6, 0x834, 0x3, 0x0, 0x0, 0xf5c9, 0x2, 0x5, 0x100000000, 0xff, 0x100000001, 0x10000, 0x0, 0x10000, 0x1, @perf_config_ext={0xffffffffffff9a24}, 0x0, 0x3, 0x101, 0x7, 0x40, 0x0, 0x80000001}, r3, 0xb, r4, 0xa) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000240)=0x8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x10001}, 0x8) 23:29:41 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$netlink(0x10, 0x3, 0xf4bbc6a15edb0657) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000280)=""/206, &(0x7f0000000140)=0xce) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x3000, 0x3, &(0x7f0000e42000/0x3000)=nil) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)="28d000", r1}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:41 executing program 4: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='nr0\x00'}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000100), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {0x2}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf8d}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1d9d}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9b8c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xcf1d7a8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7911}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x100) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @random="72af795c66de", 'nr0\x00'}}, 0x1e) 23:29:41 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x5ce9ae26f1bf42f, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x92b}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x1b, r1}) r2 = socket$inet6(0xa, 0x8000a, 0x539) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r2, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb2392a8472296bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bce71922c963a1cac40177078aa723f745e2339f6deb8b3796a7bbd5285283d9fb74079fe1a797f6bfaf9c7bb55b93d03d9153129709151b9df1c1a165c2e377ed"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000002c0)) 23:29:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x86786e7603203126, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x579, @mcast2={0xff, 0x2, [], 0x1}, 0x100000000}}, 0x63d, 0x10000}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001080)={r1, 0x3, 0x1000, "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"}, 0x1008) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xfe69}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105517, &(0x7f0000001000)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/zero\x00', 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000002b00)={{0xa, 0x4e23, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x20}, {0xa, 0x4e24, 0xd7e, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, 0x5, [0x7, 0x8, 0x6, 0x9, 0x7, 0x4, 0x7afb4ec2, 0x100000001]}, 0x5c) 23:29:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffe, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0xe, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x6d, 0x100000001}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x5}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x4) ioctl(r0, 0x200, &(0x7f0000000200)="295ee1310ed9c5cdca701e7d9683b5b6194f8209c0ee5cb8eeddcdfb3b098fd140ffdba6385d70c21b3dffebe4645a585d4833c0162532c63fb7445566862bd5b558d83bad7adc3f3579ab5ff90b0f2a2fbe907d4162fd492327f07ead960477eef55dc6f21fc530b005392b80e87f70af2619eb9916cda97d4ca28097d8ee3a6c5b307610bfb8cfc67c550a545d812a93f10089409a07b206626d6283efb9089efeabc45826389443ad135b1ef20309b9eb29f63413577bbae4a823a36edb2b414be38b80829a31d4f62af4882c6e021d00ae25fc3e89aa24793c3649fb6821b3b23f901a7e38df47d75119c7a178b4f832e1f0f263fd") r4 = getpgid(0x0) ptrace$getregs(0xe, r4, 0x1ff, &(0x7f0000000300)=""/114) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="9a202faa454869e437bcdff15be2bea27852789315ddc55dedbedd3163f211fd7124fe132cf02b08dab15584eb7622d5abdf85cb9e6f139c1ce417b60663bff9b4d058b47210149f8762b53376fc600fe654c55162f33bcc6492a3f11f", 0x5d}, {&(0x7f0000000400)="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", 0xfb}], 0x2, &(0x7f0000000540)=[@iv={0x18, 0x117, 0x2}, @iv={0x40, 0x117, 0x2, 0x25, "e5dfd09ad282a3b6ac6a939733f416d794bee2ec4a678277abcc4d7b2d0175a0e51b5f95a7"}, @iv={0xc0, 0x117, 0x2, 0xa8, "351f2c6fff1a0575e000e2892ff752b6ff7d1d492b22bcdc5a4a0712fa59b4fca3df878c06c081d532e6e1fd82c8315f29f1e36a424c0815f474016eb942ca88d6a3614565ccaf3016aabda151ee71fe4d70ee1a0977a4cc1bf30fefaeff7b3dabfa2ab51f0af06743f93540b4a14e28a6052b4a55785cafd94f9e2cf86a97e1501bbf1cc5305ddcc52a4b25d17791329d29bec74ed37d92af6b924b2a9ef4c7335d20e1907d303e"}], 0x118, 0x15}], 0x1, 0x1) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/uinput\x00', 0x800100200013d, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000080)) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000940)={0x0, 0xffffffffffffffff, 0x9b, 0x2, @buffer={0x0, 0xec, &(0x7f00000006c0)=""/236}, &(0x7f00000007c0)="15da8045e8d200fd290e3b9d5be0f2f6f8b4f4e2ed8295663ab8fabd96f7bf4180e70f5ca594a51815ebc0af0ef52518d8fc97427051d8e1fa6c848a7231c43ad25f3c83ec69b3ea5e2a5210f729b65908e9767a7d591177812dbd3d42de5feb57eec25f8271fd634e54204dae869da6ed1685202d42ea808de8a6d91b42050e46fad7319b4ed827919a1ac16afaca1b2e6016439675e75f4c7491", &(0x7f0000000880)=""/81, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000900)}) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff07043eaf000e000000000000000000008200000000000000000000000000000000000000000038000000000000000000"], 0x314) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f00000009c0)={0x2, 0x7, 0x9, 0x1f}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xf903) 23:29:41 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc)=0x4, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/66) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x12080, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:41 executing program 0: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 23:29:41 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000772000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000713000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x20003) r1 = socket$inet6(0xa, 0x1, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454d4600080000fdffffffff3547ff0000000000000000000000000000000082c0070000000000000000000000000000000000000038000000000000000000"], 0x314) 23:29:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/66) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x12080, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:41 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x8, 0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 23:29:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0xa7) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:41 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x90e10a89bc609515, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) openat(r0, &(0x7f0000000080)='./file0\x00', 0x800, 0x81) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000071a000/0x3000)=nil, 0x3000}, 0x3}) prctl$intptr(0x0, 0x80) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x3, 0x400) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x20800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x180, @tick=0x1, 0x7, {0x3, 0x3}, 0x2542, 0x1, 0xfffffffffffffffc}) 23:29:41 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f00004a2000/0x1000)=nil, 0x1000}) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:41 executing program 5: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0x9937, 0x38, 0x1}, [{0x0, 0xdf98, 0x7, 0x80000001, 0xffffffff, 0x200, 0x800, 0x3}, {0x7, 0x9, 0x9, 0x2, 0x81, 0x3, 0x1, 0x9d85}], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99bad479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012c94d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55"}, 0x145) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) r1 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x7f, 0x101000) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r0, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xffffffffffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x1000}, r0}}, 0x30) 23:29:42 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x84, r4, 0x501, 0x70bd2d, 0x25dfdbfd, {0x6}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6ef4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x21}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x84}, 0x1}, 0x840) getresuid(&(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000008c0)=0x6, &(0x7f0000000900)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000540)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000580)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f00000005c0)={{0x3, r5, r6, r7, r8, 0x83, 0x43}, 0xdd56, 0x3, 0x400, 0x2, r9, r10, 0xff}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) accept$inet6(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000880)=0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd395defc5c67a8adce29d95a66cd4fd7822a6dd82d0615e2fc77d2cc07bb96c20c7289e2736e79aba1104e899725365e60ef347479f1f212f4e641bb626519f8c5ee906d436c58e1144cabb59ccdd15356bb8e395244869bb7805fbc18dc8b1df166", 0x184}], 0x1}, 0x0) 23:29:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477fffff1") write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x314) 23:29:42 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0xffffffffffffffa1) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = socket$alg(0x26, 0x5, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', r1}) 23:29:42 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x2, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7effffff, 0x40000001ffffc) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000000040)={@rand_addr=0x4, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/66) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x12080, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x67cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x40600, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x8}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000480)={r2, 0x95, "1d1a2001881cd5a4434f05387cfac1eb5580c22bbda8962bb8780e680aed870b73d1ed41863cc708fcf70edbdf9055e905bc078955cb00e70261d6735c6cd1b81f6f3072bfdedf935617b7a81e9a34f14293936fe94a33b41ee4c48c3aa906d8f5fd6a8f8eba19f43d25e081f18bcff70ef99b2c9e73758e0b5b5f05c7340dcf7ff74c27eef96f83f1d9e8473091694425fbf83da4"}, &(0x7f0000000540)=0x9d) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x290243) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x10001, @empty, 0x4}, {0xa, 0x4e21, 0xb6, @mcast1={0xff, 0x1, [], 0x1}, 0x100}, r4, 0x10001}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r5, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000580)={r2, 0x1, 0xfffffffffffffbff, 0xf518, 0x4}, 0x14) 23:29:42 executing program 6: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x400, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000240)) timerfd_create(0x5, 0x80000) socket$pptp(0x18, 0x1, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup3(r0, r1, 0x80000) setsockopt$inet6_udp_int(r2, 0x11, 0xfffffffffffffffe, &(0x7f00000000c0)=0x1, 0x72212d99ffd3f781) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f00006f4000/0x1000)=nil, 0x1000, 0x3) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/ipc\x00') [ 447.365647] sg_write: 18 callbacks suppressed [ 447.365673] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 447.365673] program syz-executor5 not setting count and/or reply_len properly [ 447.417324] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 447.417324] program syz-executor2 not setting count and/or reply_len properly [ 447.466134] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 447.466134] program syz-executor5 not setting count and/or reply_len properly 23:29:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/66) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x12080, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 23:29:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x3, 0xfffffffffffffffd) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:42 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffff9c, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x100fff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00006ff000/0x3000)=nil, 0x3000}, 0x3}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:42 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") io_setup(0x3, &(0x7f0000000080)=0x0) r3 = fcntl$getown(r1, 0x9) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = eventfd2(0x2000000000000000, 0x0) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140)) io_submit(r2, 0x2, &(0x7f00000006c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f00000001c0)}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000002c0)="56ef571e954fd00502fca71e27ed388f9cbfb8bc4502bd2ee211e9fbd452270fb2f7ea34ba6d45abcf0d81e813b0e5a0b27759a273cda6bc556a9127fbb9802fb4f177d4be823d966165c507bbca831b56240ecc2679e90b9126603333d263e928642029b426feefef", 0x69}]) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff000000000000000000000000000000008204000000000000000000000000000000000006000038000000000000000000"], 0x314) 23:29:42 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000880000/0x1000)=nil, 0x1000, 0x10000000f) getegid() r0 = socket(0x10, 0x4, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) r2 = msgget(0x2, 0x202) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000080)=""/17) sendfile(r0, r1, &(0x7f0000000040), 0x10001) 23:29:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb9601a323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000300)=0x1) [ 447.686211] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 447.686211] program syz-executor2 not setting count and/or reply_len properly [ 447.688559] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 447.688559] program syz-executor5 not setting count and/or reply_len properly 23:29:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getegid() fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000380)=[0xee01, 0xee01, 0x0, 0xee00, 0x0, 0xee00]) setresgid(r2, r3, r4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0, 0x0, 0x80000, 0x463, 0x4000000000000}, &(0x7f0000001000)=0x57735747fc619111) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r5 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xfffffffffffffff8) add_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)="3a9443ad67ce58df159b51b5ff7df1dba3f417de9b60031c29a7ea1944afeda7e5359be3fac43f8bd7076f2c65a2260bf46970d1b4bd199e8d169a26c6928a3eef31feb01a9b94bfe3495418f9aa5108ff656402ab0f4e43ee4d71854970fa80ed041b722512b7be947d23f7e8328662d93fd779e6383736c6f60ad77a760dbd891057cd74ed951ee047ccd2c8b4fe9ed9f156ddbae247dbce8c2c299ddb0df4e072d5c7424ffd185e90edd9", 0xac, 0xfffffffffffffff8) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x90000, 0x0) epoll_pwait(r6, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x5f, &(0x7f0000000480)={0x1}, 0x8) keyctl$unlink(0x9, r5, r5) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000002c0)={0x1, 0x1000, &(0x7f0000001080)="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"}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4) r7 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0xb1b2, 0x4000) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000280)) [ 447.777002] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 447.777002] program syz-executor5 not setting count and/or reply_len properly 23:29:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/66) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x12080, 0x0) 23:29:43 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@in6={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x80) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/58, &(0x7f0000000100)=0x3a) 23:29:43 executing program 7: recvmsg(0xffffffffffffffff, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r0 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd395defc5c67a8adce29d95a66cd4fd7822a6dd82d0615e2fc77d2cc07bb96c20c7289e2736e79aba1104e899725365e60ef347479f1f212f4e641bb626519f8c5ee906d436c58e1144cabb59ccdd15356bb8e395244869bb7805fbc18dc8b1df166", 0x184}], 0x1}, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000240)) 23:29:43 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x40, 0x1) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:43 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x2, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000002c0)=""/244) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200040, 0x41) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600e7fffffcffffffffffffff00000000000000000000000000000000820000000000000000000000ffe0000000080000000038000000000000000000"], 0x314) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x551) [ 448.314756] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 448.314756] program syz-executor5 not setting count and/or reply_len properly [ 448.395571] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 448.395571] program syz-executor5 not setting count and/or reply_len properly 23:29:43 executing program 6: accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f0000000040)=0x1c, 0x80000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x4, &(0x7f0000000080), 0x4) mprotect(&(0x7f0000e8c000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000100)=""/248) madvise(&(0x7f00007b7000/0x4000)=nil, 0x4000, 0xf) 23:29:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x9b) 23:29:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/66) 23:29:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={r2, 0x4b, "4964cda3be987d1a49ffccd066785405984b5cabe62b159998cdb9f7e14e01819e1f74f3dcbb16b0f2b03bcf4b315f6fba5d275da7fa72eb6a9a5eddfb4e44f7c15d3fc70f00e6870684bf"}, &(0x7f0000000140)=0x53) pread64(r1, &(0x7f0000000000)=""/77, 0x4d, 0x0) 23:29:43 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x0) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x9e2, 0x10000) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x200, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000280)) dup3(r3, r3, 0x80000) [ 448.538177] sg_write: data in/out 2012/113 bytes for SCSI command 0x0-- guessing data in; [ 448.538177] program syz-executor2 not setting count and/or reply_len properly 23:29:43 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x6b0c02) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x200, 0x7, 0x8, 'queue0\x00', 0x3}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mlock(&(0x7f0000515000/0x3000)=nil, 0x3000) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000080)=0x28) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:43 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x20200, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000004c0), &(0x7f0000000500)=0x40) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfffffffffffffe2d, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x81, 0x80200) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400), r2, 0x0, 0x1, 0x4}}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x3ff, 0xa1ae}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r5, 0x4}, &(0x7f0000000380)=0x8) 23:29:43 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x25, 0x100) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x0, 0x80000000, 0x8, 0x2}, 0x4c) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) 23:29:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) recvfrom$packet(r1, &(0x7f0000000040)=""/107, 0x6b, 0x21, &(0x7f0000000140)={0x11, 0x10, r2, 0x1, 0x80000001, 0x6, @random="32c2bcc62599"}, 0x14) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000180)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)="9e277d6997de20b872b1e25cbfb1ad546f9cb2dba2f1ad4e3030ecff", 0x1c}, {&(0x7f0000000240)="174ef61cabd282d10e385be351ce3db41cd2f845453b499cbcff346eda95dd880851e06fd0f6651088499ed960993d08ab64ca527e655b694e60bbd834d5959b0fd4a86092494d73f03ce87b7e881aee10838f60e20355fe03f5e0210b3cd5f14b163434515cfa9c9c3e20a304fc414e34d74d11278202779ee01f369cde82d47ff2c0b3e35525d7ae2a4cae54c74af4738377d042b2048121", 0x99}, {&(0x7f0000000300)="a84ad5276241b2d89d107b12f85411f3cf22e6c1c440b7fefb830fe6e2f2d9a10aea460440947100c3c9726f1b4367a7e9716ea5c1b3103b1bf77db615a33bf9ce7778c4e1", 0x45}, {&(0x7f0000000380)="4dfe0bc09e7954451287efd9aaba917940c17b0be08b4cce80f78a7e68221d6c775112cfa25bc329406e264182aead87fe8c8d4e05ca3673bdf92f85892c38056451e4023c3b754dce2c048bb837474aff8a2f5ce43f95e2951f653d5330f479cd2886e0896d762003127e4a104a96f97fe43a99a04facae3a78a9b4215be85097725afce4e2ba863060800b7342f26894a07ffd1a1113668c33788d9568806cc32a0f46a45c446f4878424d3c2011ece10cfc4822c89546a766f853931a5aecd77d698d0eb0684d5ddf41188f1f448fb4593b30ef05d50f27a4c1d322910f71166eb5e0364489ed4c8c7585a4e13be2b6f88526b1", 0xf5}, {&(0x7f0000000480)="444d2ff0f52d97498af47b915fa92151397a3df6b457f14b5be9d023dc63f7f7850eb0d95a43f8bd64b8ee", 0x2b}, {&(0x7f00000005c0)="efb618352161347adef01215612d7637021a3181231a5647e8b2e2f164ce33bf10c2915b0c5acb0a465bf61e99bd46b2585cf9f859da7733980054e6727cf3c63a05f80894777b25ef008464157f0429d236bca750ef12b5e428988d162bb6bd6bae880892", 0x65}, {&(0x7f0000000640)="e7693d2ee095ddaea398a0e2eff40af55e937b94d2d76596e50da35ab23fecccb69540cc4abf428f6ab0f2bdff487d4dd8e84bf4ba4d745549bc13047ec225ef1242a49de94c", 0x46}], 0x7, &(0x7f0000002340)=ANY=[@ANYBLOB="2800000000000000170100000600000009da3579c406b635cc8c44f5b32ca1022256685d823ef100080100000000000000000000070000005a24d3fb969a4daafd5f6177f3a2f63aeaa11ac15b362d96e1cb6997e2c5121e1799a424f8f94b36d4b708eb5430979b1f83b0bc5f3bfe2948e28fb93f0ca738ba736213d92a9fe6524681d96a9488fb089cc31d0d5b4bead4b3fd8a2a84d290eb8351441da57de52caca10b7f49b422ed297a95a7ed88d45286d378001ef6e3470d6dfbb5284ea7849560fc167730946491af9619a379bc88a2224502c210cf13a14392317ae0eade0deeb01bf996ae96dbc5935d06c27b24a385f0d1a52a20e68aba9a73452218d82712c012c7c75e227f44749f870ef59969c23ff66cda106d2af4345ca6b765a14798d7a8ef748f59fb42ca1944030010000000000000001f0100008100000048000000000000000b01000007000000a7176c11b50892e2707393a609deebf58a54448df23ec4c43c464918c77624dda13d5b29587d34293b3baac7308f1503b92c2ff4c600000058000000000000001501000009000000b4924c19f556190b5e50511d7e8acf085b8ab6925226b7999ebbf50b26ed77c720392a8237de3a144082e0dd2331afbc58a4f71bab8d3283ea53788b6bbcf5d93499d5d45a22000010100000000000000000000003000000166dbf1847468313644c638a7e19fd2e9fcecc572b0ac0dc50782d3846d806488a932c2faef9c1370f50cdfc801cab19684dca1a216aefd019786ef44f94cf63af247cab86bb0d5b9f564579a4217154ca3c53444e9c0b8a110a49500583368ce29e4e080bedce1930b0291174a29132bef5e24f7737ec826f16fc3588d19c8dea6f3f1ef20c275e2a5edc9e837812692ecefd382ef12ed9adbe83504eed928630923be67c72d4ed5e3469f6c7809f7b5c31172510958c77051dcc750a917bf2c3b2acec70edf1ecb359084eb07ff67d71ff957557ad1381edc7359dc075bdd03cda3f50c3265bd73460765798e60e85e053f3c37acb68ed6e82139b5a1b25fc01816c5348376efbf9c812b297438f81189f68c8b40a64906faf36383d7ca428b3725eb8da7c4edd82cd5d59e4e8e385913eb51a582980692597251f835395ab385e3112278f66a4f9681ff28aaf91e6dbdfb9e03d365127ff1812cd1bc7677416db0c67e5922e3c04f2f5285df4335186784ce4e3d1812c20f22b4db4f99263d8e915c8d931d160c8912fd45c9b91ae54b1cd619e3780c6e53854750745b709d509de6b6323268a8065232597e6c43a76a52294e2be3dee326205b1d6ba52c7a7166782c8d3c213098ab2e1124efe9d593ff959c45981a3fa7e96c97be25788d5686789eab9e4a05246b2037ce6d83c34f4197c7cacec7fd90b5e9cb20160169e9ae30d20f26f9293028bb7806e29f66cb093cd86499e507a594a1a3031221398dca355fb1adbc1fd2f2ba5425f2bf46b48ec9ce1f0b9b7631e04ad3a7c1697a0de3535d1c5e65c0453790fb08a3f486fdfd134056d495e90d159bae1a8a133a7539bf80027c04ab67462a291e619f50742e3323772a56f7eb5312a3b00633dbee4b3a7fbcfa509917dedeeac6a6012fab0a2033633c802ebd836867f682cfe41d3d15d541dac921f1c2bb2f897799a8146294d2d076eae3895c9b529a8ce73a6d9c4ad2d82b1d86d9e5b737a5368ec10bd8965dfbab556312a05bf3ab2aedce80c98184cd080dfcd585b344df3f5c1b6a3669fb8dce7be4e10ca025269785f6dc62f00f8ef81dade0e75546333a0db73cfb2091db67ee797b0cf00c112e91cba1e5c8022733b8b04d36299cbaf289f84977218aca82e5dafc464c865b71cfc3046883d60074b90ebc4955b46208b9b77f4d2f9b09c2dd4cb8667156acbaf3b4af04c247d3ddb455859e40c522538224c47bb63ad0a8b51b966aa9be00e8a42a979a19b0db4c183f14c128b0e24e4e9cffd9ace0024500f2e29a20d72ff000c4a59e1b52bc69a6dfb54f729102efa12da218cb29a8a6ed391382ff8cec0feedb15c529133bf36abb32a8af2131edc1ffa1f25a991fe03ddf95fc9a92873e6cbc4f9d2523f108b151fc35ada1cd5435d319adafab7835146c506acd03c93aafe96c082d103dc02723eb334ef9a392eb3d612e8c4e3b72c6f0c4014272b1d856883893735d2f17892f02163b01210108675b47820d9bf1635099a9ddd7c2237fd08ec215cd2904980a361c8e0af3ef451f04ac204e94d87259c4a60485ca63729365b01f2eb1f2fc1d6563de78393c21cecddbdd26e1b8e559fa373143d7438d0ffef9cb67d89cb8880e50bedfa0c02f68b9516828bc66b25a1f5fa4d0724bb85c705336b93e7815462a7395397b2486feb1b8ee72275242b3f540ed9d2b162a26575198cd95ad42547f4dac0dfe8b50530948f8a03d92eb560e554c6f3775b9a04aec620793607945be64e75148885e17c67fd0986081377ed5649d94349d4853102f72f1763167163f0b8a567b62d2c44c00db0d9718a3b0707685e9768add48c9bc01647958f9a0e68b48e7a930a95250dee16ef8748aabdf6e19e62c1ecf9930ecdc4f15a9ee48d64cfebd171e3eea16e8bd938ba4f97916d631b49279e6117204bbaf36a276533129ec47bfc82aaf9e9651fa96a06c672a657fef96cb07d3a495efa45a9a69229013c3ec46613bd677108485fabe67a4de4ad70a41708333d13d2778ad75757e93750406e92c0337999fee308c1bb4cdac9bca31f47ee925f37400b25feba7d84236060ff0ad4aee920d8c79765ab8e8bf28fbace6a2a5e7fd1309c3fc55c1f01737063ead7602a979f7cc745c94636bdfdf3c0751494d03a5e1c28cf21750ecbe57f5a083d5bafa6bdb591b98636a8a992e8876566a4df899751416f101d3d6592fa7b7c7388a7f3b24451154a7388f9d811dc01615fcf8ff85f2d277a9c676d17d1fe74a61f1d936e08844842a063ea39350c7e7c6f7aaf24408eb63b2c8d4ac65cfd5477db747400e52f7120da34a6473acae101650534301e371122fdf7e8d656690e0af32632b26a37b95cdeb02dc7deb961fc641ba989cedbd9a92c8adc15c45caf9868f87dff17bcc411fcf4a14a7face7a6bcf78f7b8cea03378392a317b13f37e263da701c0aaf27b3535920f7389ed438dbd49e85d7565062ed2c7396df89c7d160b5f49653bc62aaeafe15fbc07888a65c2830ca0b0fd1c71ea8def6518b72be8380ecc9463f9df44cb563dabf520b6adfc124c04a8fec8eab7e9d8353c86f1a6cd4741922551a9ec57d23ba58edf2d80e8c55bad2be881cdfce6f484e26648742db378c02e6353bf289bdb6f01447492b50208a9d1fe85fb30454a2de9dc2aca8b43bbdd41a0040763395b324f466024c680f35162cc401bae99d5ad5b55dec978b1222470dbe59ccbaeeca74b92afa038734ff775c9258416c15fdb2b02a45eb058a356306952841bdf83f310e844dfa7f19c9ba0b27ec773006400efba96951b5e0f59a365509fef638fa16abace75f9e24cf174f58ce467d5a5d36fc05e8f64246a7cd370237dd3b10210783a1cf049dc8c70ddd93b902d435653b2f0b48dad6c12eae13d16a14f8729b9a71d36151e3b82dd46b3d5771d1d8c43bbe5de019c8e2fd87e2f4981d36702d3e22329a79eba5a4b5611a77bdc6f0931d43c45203a52cd1821888ce539dcc6308c43af9586d3954b4d208ab49be6e3d10f952a3f8d20ed51b57a51f075c963d294303668b324b8cfe432a1d7edcc58f2ea168eeaa401a54872b77378ab4c1ae36d716bcbb268372506f875bc139d2bfc9e85f4a1896f53c84c09f33bc2ba54a09302c9abf9a2acac41942c1b58b83553d868560c16f80fef82c2b02211d78400af0fc0f6f85e6fe2dac585201e7cc8f6425b5a00e92518f07d1ac377f7344391697f86904a0cc1482b61c09c7829de083d2ef90aea31eb51223d5c73f6a514e19b14b55fdb71024dbd153373cc2ffc2dcfb1e91b192c9106310f738b4b84eb954d845e2c490cd4fb705f3934f6e82f961180c0575d2c2b10ca6e9217a337037e130dfa67732941def7b82be7a44467f9351c75460ad982e8f1c6331641d92596408e5509da5e0e905995e6f3a004b6de219e2ef9ba2961e7c2179767b00faed1310485706f9fc0fd59b5e5897f3b2865986aa7ae47eefc2d311318b9a3820925b6c1f523710ce83e7ccddd54efa57fee4c55ab9f54a3fa849a388d2c8d1a4972abc2de6ebbe774ef667dc939a81a72e0bec05240defb240488f20b8274291c8eb9929eda39470f6e940dce36f8ed62f1b17cf22ecb9f982e302031789e14b57ebaabe66c1b4e32cb0bb8c267d205fec846ebb494b36b127cf88b9b3d56091171235ca640e0befff0d68f8ed7afb5f1cf1560f221dd4b1d4d358d4f730183590d7f4d20ed9ab38fee117efc4f83c621f4bb39bf39feacd2e8ec2dcd3a132721aead0a939263971d4ececfd7dfa461b1a3b58a002870dd21e0c3733d85be0a401cffd90a0b68b35b46141747c1ca7d27c059bdf9cf4d25d05d30f94b6d6d14767586131f43853bc00bb25b4295da80e3ce9018b27afce4df7c7eb3269079a8756420ee3d895bbd96d49b2913212e3252cc2a2f4b89aac6cae250c2398ba1df4f89d9347c75ddfae7b28a8d9384e1c7f16898acce61949df7a2715da9c7e99599b485dd985ae700f37086962c58709df438317acdf8439f5ed1caccbfbac641e8c98dcc0bc3117c5164c8428c74526ef98e8bf6d49d75245059605d1fc8d470fe2c3d285d0dc6ea92f8bf0619c79cef8b862c68580b1f7604a21b7df2f2e4a8b7bd0960898aaaf0ea900e2f91896a1f44e1609615acbef4ad4e4e424b23548006ff2803a6493545c8924ffcb8346ddd90519db020672793d425b4b63efb08cdfb4ade44156ce89ef4c8056ce0efb1c51dab91fb692a1d1814c1c1f571947f0027245ce5128cd90b85391255a6d695308696f24fe7e7a2cda568fc2280d330cd0383c0bf9fab297bc42498465bb8b6da34d7e480d2c454da2828c5a3373716faedb82a9dd03f6e7ccc74605eb2996d6973d60a316cfd0ed1858da913b2b962ca00a00b1fd989dfc87eb55f840657d539329799e01ceace3570da56c3d4f0ad7efda3112ac10de48492f4673e9418a64762afa93f5728ad6f08c318e07ea7dc525e463212d473595241006aede5d4f8e370fe98be054ce5cd7dd31b995ce7927b80784e06d7066bbee583dddd19fad9564f2c602a35739452830e1f9f7fb9b7b6eb1faebe9dbb1ab771e594a0f5b2b12ac2a6749d7e1419cb77e0f5d2a6f416d373caa6258dccc12a56e38199d5160620a3dcbe5d1d8369fafc48bc4fdb64e0e54d767ffc4b409b0e13b97033f44b40589d5d41ba7edcc0f9c9052de3b3b8dd2d4fcaeb03c4580024e5da84184911c7fac97dc0ed18dd144de94b2796ef2c41e2cda4c437bac8aaa5b610a6cc34d0ebc5863acf56998450aaaadf87991fb82724c30bcc0655fad5a5f80b57ea48c6b89ed7865fef8c659bdc27144210f68dae3ffbf88d319a3e2990df9f594548ff35d09a9fb1001b1802b8340bdd1aa8ac16d1bd0ecaa48126b947223625980dbf568c0a1c6f12a45c3acc1855d0ed95fe7bc7727c54cd380c6e375b320429571ca9434d077806c9bd312f699d538793ea5b68d7cc170e282914f45b7600876c01036bc4d450cbd24cb17e78a525dcbd29a60d2fdbd064a652d9328d3c35647439328146eb26905372d47f33c86faf2efd193b937ba16727676bc5c1ce720ed3657dfad8e1c6542dd16014e6b7d005bcb811ef2f1662e379e1d899870b90de6d846cc889cfe4bc2f6d96400ea243379f75adff5946ea5f01b2f014df4315d351c6826bfca79caecabac4fddecdbe9f216fb196470214201efad26850876304ba63e72215f629fa2e990faf2e88a31bfebbb94670a5bf9a89eae0817d839fe3627de5496946eed78f4f5c3a1178f9fa88bb2e443f2b37301088e0cdb07f8475064c35de771bbbabe5e56b76fa642282c1336f07897f2a5c7a130f722fc47b395c5b1df682d7671f6d7efe8c93d402eb37c24dfba6f246724fd7967fe5298ff615d84ab55c309ccba52e3be02d90e5a9b44b7e2a5654c8796551e017dbe218092f7b4122e3b6b7a11902fa48e1b57f075410ff0bc7087851a52bb2e8b5cbdd738076d3dcc4d2334b7c335e69ba4ef9cc3ffcca7baa098ed64772efce4b4c9b01693bd2bcb929fd36c98c2ef3d236e7ab60f6cadfbad862d5f7a0e95a8b1407ef2cfd3348cba3882e4220fc56a4c6ea3de4c2d93eb5cfd544e7ecda713f714ffc491eea959b60f52cbfab99a2a855354d44c264f54445796342b13149f5ca8f0ac395bc6507d202908af2a48c21d6f45d45da0f764b0653a96b720713f9974a8f35748cdb338e0cef13e5735e7ad00000000000000672009e44c622b1c78f3d3518fc63618c9d83e3b8500d4fbd48ffa7f916214880458e69b74f0d2a16560dc6164ae990d26d746c3e451edec1c008919c3229d340066a0117a7cfa575dfa095658a1fa2d139af72792e05449c1b51b6fdf238c0a7987e879bfc1a3f0a29ccb3fd3bd94266efc662b86892bfb2d879a176eb590ec5dccfc744569bd69dc4d064bb965d52592"], 0x11f0, 0x40000}, 0x801) 23:29:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) 23:29:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) timerfd_create(0x0, 0x800) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff000000000000000000000000000000008200180000000000000000000000000000000000000038000000000000000000"], 0x314) set_mempolicy(0x3, &(0x7f0000000000)=0x4, 0x3) [ 448.757700] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 448.757700] program syz-executor5 not setting count and/or reply_len properly 23:29:43 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x1000, 0x3, &(0x7f000069c000/0x1000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:44 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000806, 0x85) getsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0xa00, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/32) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) 23:29:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{0x0, 0xfffffffffffffffa, 0x101, 0x6, 0xadc7, 0x2, 0x939, 0x8}], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0x10d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) r2 = open(&(0x7f0000000000)='./file0\x00', 0x210100, 0x1c) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000001c0)) 23:29:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0], 0x4) 23:29:44 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x20000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0xb}, 0x4}, @in6={0xa, 0x4e20, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}, 0x71}, @in6={0xa, 0x4e22, 0x7a70000000000000, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x7}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e23, 0x398, @remote={0xfe, 0x80, [], 0xbb}, 0x80000000}, @in6={0xa, 0x4e21, 0x7ff, @loopback={0x0, 0x1}, 0x7}, @in6={0xa, 0x4e23, 0x1, @empty, 0x80000000}, @in6={0xa, 0x4e20, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffff03}], 0xe0) 23:29:44 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = socket$inet(0x2, 0x2, 0x7fff) mmap(&(0x7f00005fc000/0x2000)=nil, 0x2000, 0x3, 0x50, r0, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:44 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x7, &(0x7f00004b4000/0x2000)=nil) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000c801}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x805, 0x70bd2c, 0x25dfdbfc, {0x5}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3ff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x88}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x800) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x80, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000240)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x2, 0x3, 0x6, 0x1, 'syz1\x00', 0x2}, 0x1, 0x3c, 0x3, r1, 0x0, 0x3f, 'syz0\x00', &(0x7f0000000280), 0x0, [], [0x9, 0x6, 0x882, 0x4]}) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) r4 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x402, 0x41) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r3) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000400)=@req={0x28, &(0x7f0000000280)={'veth1\x00', @ifru_names='syzkaller1\x00'}}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x28080, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000140)=""/231, &(0x7f0000000040)=0xe7) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105517, &(0x7f0000001000)) 23:29:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fddfffffffffffffba000000000000000000000000000400000000000000000000000000000000000000000000003800fcff0000fcff3350"], 0x40) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x5, 0xc429, 0xfffffffffffffff7}, 0xc) r2 = fcntl$getown(r1, 0x9) ptrace$getregs(0xe, r2, 0x101, &(0x7f0000000140)=""/49) 23:29:44 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000f64000/0x1000)=nil, 0x1000, 0xb) 23:29:44 executing program 3: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 23:29:44 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f000083a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @multicast1}, &(0x7f0000000080)=0x6320) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:44 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x8000) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) 23:29:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600080000fdffffff5fc393d500000000000000000000000000000000e4a3000000000000000000000000000000000000000038000000000000000000f05bdca574f5205a3ec0b59df813b9d36f4333b7aa57d08152185520014320b011378b02cb5ccd389f454140e470c9e52626b3107b9ff613c0f20cd1ae60a46f"], 0x314) 23:29:45 executing program 7: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/63, 0x3f}], 0x1, &(0x7f00000000c0)=""/172, 0xac, 0x80000001}, 0x40000000) r1 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r1, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r1, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000240)={0xfff, 0x4, 0x3, 0x0, 0x0, [{r1, 0x0, 0x20}, {r1, 0x0, 0xffffffff}, {r1, 0x0, 0x7}]}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000001c0)={'ifb0\x00', {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}) r2 = socket$inet6(0xa, 0x4, 0x70d) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000003c0)=0xab) 23:29:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000002c0)={{0x3b, @dev={0xac, 0x14, 0x14, 0x17}, 0x4e21, 0x4, 'lc\x00', 0x10, 0x2, 0x2}, {@multicast2=0xe0000002, 0x4e22, 0x2000, 0x7, 0xd78f, 0x1}}, 0x44) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4656000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8e17f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083fccf4acf1ca00cf618e495252a6a7077b8d55bc"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000500)) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)=""/198) 23:29:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x4, 0x2, 0x4, 0x6, 0x3, 0x3, 0x8000, 0x28b, 0x38, 0x1b8, 0x3, 0x1, 0x20, 0x1, 0x2, 0x2, 0x2}, [{0x60000002, 0x7, 0x5, 0x7, 0x3, 0x6, 0x7fff, 0x4}, {0x4, 0xf141, 0xa5, 0x0, 0x1b, 0xfff, 0x6c2}], "782d72fe88854e2752d58759467cc29e4964183863d4a5d1640f20a31a07622fee6cc7ff3311867d5b5c460d6993a8bccff8e9d8ac2c88982b29b622b611b46c7f92e4d3e5c0ff69fe155fdbf71f5066535df056a75c1f586b4e23f25c29a3683c33c5605a10a30993edaa243459bc6bad2660fc9e0ed696440ae74417d75abfa339f1bef7d8d0467c0a58269375fc55e3f8f6ec736c439c2c49531d2a5b4e3af8abb6c4", [[], [], [], [], [], [], [], [], []]}, 0xa1c) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000}, &(0x7f0000001000)=0x18) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r2 = dup3(r0, r0, 0x80000) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) 23:29:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0xbe, 0x80000001, @scatter={0x4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000140)=""/73, 0x49}]}, &(0x7f0000000400)="ec852ba6e433851eb589074fd641100cd2c2ee18ca20a11d226a651048465eb3a8723de63a0565c9efd1f3bab53e96b40aebaf4e6877202e732e3deae1ccdbff899cee4ad828af3ad2bad931266813cc7ce9f3af16a59c12c31240d6518df07f57497752605f90fe8d279c7abae0655a379597d13755e17fcf2a5d21192850996c6b8d9ee56369f86b85bf6def1919c58e4d62011197d6db8e7a2b5751ae9de5b475be7cb1d05ea0da9ac88285bd9efbe97cd12364f6185c71013291b9fb", &(0x7f00000004c0)=""/162, 0x4, 0x10013, 0xffffffffffffffff, &(0x7f0000000580)}) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:45 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x101) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:45 executing program 3: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$invalidate(0x15, 0x0) 23:29:45 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = msgget(0x1, 0x200) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/139) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:45 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffcf, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) [ 450.221186] sd 0:0:1:0: [sg0] tag#5599 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 450.230151] sd 0:0:1:0: [sg0] tag#5599 CDB: opcode=0xec (vendor) [ 450.236506] sd 0:0:1:0: [sg0] tag#5599 CDB[00]: ec 85 2b a6 e4 33 85 1e b5 89 07 4f d6 41 10 0c [ 450.245490] sd 0:0:1:0: [sg0] tag#5599 CDB[10]: d2 c2 ee 18 ca 20 a1 1d 22 6a 65 10 48 46 5e b3 [ 450.254558] sd 0:0:1:0: [sg0] tag#5599 CDB[20]: a8 72 3d e6 3a 05 65 c9 ef d1 f3 ba b5 3e 96 b4 [ 450.263529] sd 0:0:1:0: [sg0] tag#5599 CDB[30]: 0a eb af 4e 68 77 20 2e 73 2e 3d ea e1 cc db ff [ 450.272546] sd 0:0:1:0: [sg0] tag#5599 CDB[40]: 89 9c ee 4a d8 28 af 3a d2 ba d9 31 26 68 13 cc [ 450.281516] sd 0:0:1:0: [sg0] tag#5599 CDB[50]: 7c e9 f3 af 16 a5 9c 12 c3 12 40 d6 51 8d f0 7f [ 450.290523] sd 0:0:1:0: [sg0] tag#5599 CDB[60]: 57 49 77 52 60 5f 90 fe 8d 27 9c 7a ba e0 65 5a [ 450.299493] sd 0:0:1:0: [sg0] tag#5599 CDB[70]: 37 95 97 d1 37 55 e1 7f cf 2a 5d 21 19 28 50 99 [ 450.308543] sd 0:0:1:0: [sg0] tag#5599 CDB[80]: 6c 6b 8d 9e e5 63 69 f8 6b 85 bf 6d ef 19 19 c5 23:29:45 executing program 3: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x404, 0x0) r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) [ 450.317519] sd 0:0:1:0: [sg0] tag#5599 CDB[90]: 8e 4d 62 01 11 97 d6 db 8e 7a 2b 57 51 ae 9d e5 [ 450.326506] sd 0:0:1:0: [sg0] tag#5599 CDB[a0]: b4 75 be 7c b1 d0 5e a0 da 9a c8 82 85 bd 9e fb [ 450.335484] sd 0:0:1:0: [sg0] tag#5599 CDB[b0]: e9 7c d1 23 64 f6 18 5c 71 01 32 91 b9 fb 23:29:45 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x70, 0xf9, 0x7, 0x2, 0x8, 0x0, 0xffffffff, 0x10, 0xb, 0x4, 0x6, 0x5, 0x1ff, 0x3, 0x3a, 0x8a91, 0x1, 0x9, 0x6, 0x9, 0x1000, 0x1, 0x8, 0x9, 0x101, 0x80000000, 0x71bf, 0x80000000, 0x9, 0x6, 0x8, 0x4, 0x3, 0x80, 0x3, 0x7f, 0x9, 0x0, 0x200, 0x7, @perf_config_ext={0x3, 0x2}, 0x40, 0x9, 0x4, 0x4, 0x2, 0x8, 0x8}, r0, 0x5, r1, 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:45 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc)=0x8, 0x4) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000, 0x20) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x3000, 0x3, &(0x7f0000733000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = dup(r0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000040)=@can={0x1d}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000000c0)="e92128a712aa52cdd1b689eec0c51d2b8c56ef8276493280e56e9c8b9ccb7df8b3da286250b110e7eabe840e759102faa0123391003599e2bcbef1648a20aa69ba6f7abb8b0ada60a88fca459362f0297a308168245a5321f256840735918bce6fbbd31a0fb11006dd48776fe51497402c95acd0e0a90bc35e7f60d1e4e0a52bbbb361d48232c92f940f71d4fc5b92fa8c1def85a4bcbf0cfa19a45d586e48fe", 0xa0}, {&(0x7f0000000180)="ad20f7e34acf2d9e16b1d01924ab65db06d597baf18f223033c1a150888ef85be473c9e98ba6f9c9cce2a36e50fd59a9d76eb81d6605546a2b9584e71923d44ea0fae387e6d413f0d39b3f442fca650658815179dd64ae77528bd88b331a44abc103cd3b7d6cb70eb5b49f208ed5ee07833a023b5b67e3df6d56eee4ce60b4418c6da1", 0x83}, {&(0x7f0000000240)="6d7a39949076cbc911e10c0997e6bf6d26d12553afaa739964da72b20e8e869dee1f0dc078bac4bb922e2ed76a015ff0d47b186344b067155b725fa88d4fa079363ea4c53b4b090fb4d302f24665445e0c21851dd680be29619faf2b9af9475c7efcdb22232bf124ff376eecc3efda37ceba799168f1502b54e926f97c5b3fbb8f0c43a91eb9d52fcb3473924a4e8122846efd6ca563a0", 0x97}, {&(0x7f0000000300)="b543606fe118c60f6a9812cbf6c7a0bd4c3e", 0x12}, {&(0x7f0000000340)}, {&(0x7f0000000380)="ad74e0bbff", 0x5}, {&(0x7f00000003c0)="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", 0x1000}], 0x7, &(0x7f0000001440)=[{0x58, 0x114, 0x8001, "c98a5f65bc3e0f5576601db389137f8d545965237ca1a43d370dc1d6a526de8d707cbf84596f2104cfb152a9244838af4a555297c9cab703f57233bd3a40d538171c"}, {0x98, 0x1, 0x4, "725582aa30ffe8ec7ec1faae0a1d25b9f66c5ef96a4dba9f394b96c5c0bf0db46963667152dbdcc0ca5df1b72750bb6e11582831436ea55b094c9abbe36d82d379c1d56975c13fd8bfc5a04a0bc64b87e29000534df785c26f399215e4744d6cf95933ced7dd998784d2ecff6ac626d446be0b618881419ecc98d42860658b9e36a4ef2d"}], 0xf0, 0x24000011}, 0x40040) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000016c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0xac, r2, 0xd03, 0x70bd2d, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40001}, 0x8004) 23:29:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa000, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000040)={'veth1_to_bond\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400400, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000540)="f54aceaa40f67bfba04452ce342a85dd0990e56f4da3057364b606fd16c7def56486b4c6ef9d4e35d0141f5851cf", 0x2e, 0xab94, &(0x7f00000005c0)={r4, r5+30000000}) io_setup(0x4, &(0x7f0000000500)) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x114, r3, 0x10, 0x70bd2b, 0x25dfdbff, {0x3}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x65}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffe}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x28}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:45 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r0, r1) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockname$packet(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x14) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40000, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000040)={0xcad8, 0x3a8, 0x2, 0x9}) 23:29:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x5) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:45 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 23:29:46 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f00000003c0)="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", 0x184}], 0x100000000000012b}, 0x0) 23:29:46 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101040) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000864000/0x3000)=nil, 0x3000, 0x1) 23:29:46 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2, 0x40, 0x0, 'syz0\x00', 0x80}, 0x0, [0x8, 0x0, 0x8, 0x400, 0x4, 0xffffffff, 0x0, 0x20, 0x4, 0x2900000000000000, 0x2084c8b4, 0x5, 0x5, 0x1, 0x7, 0x2, 0x0, 0x0, 0x3, 0x1f, 0x8543, 0x6, 0xdc1, 0x7, 0x6, 0x100, 0x0, 0xcc9, 0x800, 0x1a981e1b, 0x3f, 0x3, 0x3, 0x4, 0x10000, 0x2, 0x4, 0x9, 0xe000000000000000, 0x1000, 0xe84e, 0x0, 0x7f, 0x100, 0x10000, 0x2, 0x8000, 0xff, 0xffff, 0xe7, 0x0, 0x7, 0x3, 0x9, 0x200, 0x1, 0x10001, 0x0, 0x8, 0x2, 0x0, 0x93c, 0x80, 0xffffffff, 0x5, 0x3, 0x7, 0x7d, 0xfa, 0x1, 0x58, 0xf5f8, 0x7, 0x80000000, 0x7fffffff, 0x9, 0x3a, 0x2752, 0x7, 0x1, 0xd7, 0x7, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0xfb08, 0x9, 0x4, 0x8, 0x0, 0x1f, 0x4, 0x3, 0x5, 0x200, 0x3, 0x8, 0x3, 0x101, 0x3, 0x9, 0xd525, 0x0, 0xffffffff, 0x1, 0x8, 0x6, 0x3, 0x6bc7, 0x1000, 0x8, 0x4, 0x5, 0x2, 0xff, 0x2, 0x7, 0x5, 0x7fffffff, 0x7, 0x4, 0x8, 0x5, 0x4, 0x5], {r2, r3+10000000}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000)="456a2c1687395b6cb1cf86e46751f9bc7bc647dcd5a7e50a38e262c6e1cf054f775a32a01bd7731bc486c9aadd6116df8520e83cccd03133f0e8dc1a1a9f9c0c6fc055d24102e55372b934737db83b76ef8c86c31952b61108abadcc20d27fe094624105d7fedde2ea19af9e3928203f8906e169a02b94a8922eb088ef5691f54759b2b5c0b2878588f0419144e5af6c81b19c9e49a93b143087e2f01221af8f8947113986a7246f21a968472dfd94cdca282ece7fb21d2f67e1c345d0169c92afe390c03e2e92876451acfedbafcbea096a35c1af095011b247f91a81e7", &(0x7f0000000100)="cc98f75647c528c64aaff28a4d655b8156fee50605ac3c5d73f5c79784323625ee079a61cb403bc5c2e2dae54144b1a5bec64f6f6839a752b0ff06d982e438ca9ad58808c36c4755b0cdbbbab7e328", 0x1}, 0x20) signalfd4(r0, &(0x7f0000000700)={0x78c9a3b8}, 0x8, 0x80800) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000140)=""/223, &(0x7f0000000080)=0xdf) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000000000)=0xfffffffffffffe69) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x400004000008912, &(0x7f0000000100)="295ee1311f16f477671070") fadvise64(0xffffffffffffffff, 0x0, 0x3, 0x6) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) prctl$getname(0x10, &(0x7f0000000080)=""/78) 23:29:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x117, 0xa}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r3, 0x1, 0x30, 0x20, 0x8}, &(0x7f0000000380)=0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) close(r0) 23:29:46 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc)=0x2, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) socketpair(0x15, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = semget$private(0x0, 0x6, 0x2) semctl$GETZCNT(r1, 0x7, 0xf, &(0x7f0000000080)=""/138) r2 = add_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="f1420f58faf5860bd206cc1023cf0d56b01831ef8a0f856ae9831bafb66fa726ddd5efd0e2f27ebc1c0ccb0260c6c387d4c7513a3e9a28072e821ac78c2adceb4be0232eaf7dcc78", 0x48, r2) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x5, 0x3757}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f0000001ac0)={&(0x7f0000000300)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)="d950c6edfa450f99dbd1d84793f7e70e2558fa8cd24584d05ee7826c1dad2b2eb8b28175288558c3c8e01dcd39c41cd2816031fc66f452cdaf0c2f56000e9c15a816bc9301e573b142890e588ae7393e850063c90dd9ea74", 0x58}, {&(0x7f0000000400)="86a849600018c30e9681c2c3b3cf763bebab305589c04b6da419f7f90efaf2fc815beefd0801dad586548221d8a61de76baca293803139dabd1d58937c338878814ba7ab39036b8bcdef7cb7b50af5cac465a84af30497ce429c66ceaadcee60e7095b88e8", 0x65}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="fbdcbd1f8b9cef11c02484562a0304814f64166c7b768ab441d9144cddb35cf78c9a7358dbbe9bcaa3a7c7c306e05ecb22611fcfc7dd25a4152fa3f3640af1c5091ab61376ba415fc3d2ac5df43b7208f5e50f7bc338b4bad01d80f9a3bc667fa319580ace082bd1412ec7488ed6f3fc2ae5becbe04d20aa233c", 0x7a}, {&(0x7f0000001500)="853be176638e38dedcccf0698490ab7a2d341bc398ee553656b069535bfeeb792e217622b19f935d1271da7b416c83f699085118e16421df3a9f19c1b1d8f8e4b8b5973115fbfcdb6b322edebfb4b7ccc1662ebf92bbfa0a8654a57bbfccf12180", 0x61}, {&(0x7f0000001580)="d9d697f59bd595f62212aa0711e76901270afe559cf0cd2bdc587e840f5f56b8165755a632e741a79c5614f882e77de6fce14f6ba1c23b22ecc18fd0e43dee3f1fd4478f8aac2f095bc864eb8ffc9460a13dec7a9d9193b8847e89d9955ab77df3fbe8061089e2ad2b914db34344e43d71f640a495", 0x75}, {&(0x7f0000001600)="2f589b04915b19d3372b48f517792f1fdb86331cf55116867266b4fc84d305b480a49240a9dfd0876c49c39ea3151e0ea100573ce9c9082a6e5fc611f8acdd198072bf1265ce890193e681c4847c56996cd639f7416c48017d054debf4c4fb2d92514d86754d2c83cd6cdc27ae553b724a1068fd", 0x74}], 0x7, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x3c0, 0x20000000}, 0x24008080) madvise(&(0x7f00007b0000/0x4000)=nil, 0x4000, 0x8) 23:29:46 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 23:29:46 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffff7, 0x200) ioctl$TCFLSH(r0, 0x540b, 0x1000) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x7, [0x8, 0x1000, 0x10001, 0xfff, 0x3, 0x1, 0x80]}, 0x12) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7e454c4620080000fdffd895c2ffffffffffff0000000000000000000000000000000082000000000000655574301575fe8b0000000000000042000000000000000000"], 0x314) ioctl$TCXONC(r0, 0x540a, 0x7) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000001c0)=""/44) ioctl$RTC_VL_CLR(r0, 0x7014) pkey_alloc(0x0, 0x2) 23:29:46 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0x9204, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:46 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, 0x0) 23:29:46 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x1000, 0x2, &(0x7f0000736000/0x1000)=nil) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) madvise(&(0x7f0000515000/0x3000)=nil, 0x3000, 0x8) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0xcf, "e72d1b73376dc8cca0382b484a6ace250bb1886268e35e6b72aa655d555f86f3bcd08128c1a8c7683b22181704145906ed8ecdf0fdcb0b9382937b79c51c779079879ad22b6b598ff1d9e2412da72488b2bf8270fb4411e01464c0f6d8db023ec3e9157dbea5d2b73d36669ca6a04c1db370954138099e67a76c88ab1e4be2999c9080212d97751c3e667505b1f423457147174d00b291485cb1be88897f9b308d0bebf4c30b2744681e0428c565fb62617ebbe5c95b06a49e5a1dfe85d720ed14f88a66dc71111afb34259b7ec43e"}, &(0x7f0000000140)=0xf3) 23:29:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) splice(r0, &(0x7f0000000000), r0, &(0x7f00000002c0), 0x80000000, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d5508"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:46 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x121080, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6, 0x8001, 0x2, 0x3, 0x200}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0xd3b, 0xfffffffffffffeff}, 0x8) 23:29:46 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e20, 0x3f, @local={0xfe, 0x80, [], 0xaa}, 0x7fff}, {0xa, 0x4e21, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0xfff}, 0x9, [0x7f, 0x4, 0x10001, 0x378c, 0xffffffff, 0x2, 0x1, 0x5]}, 0x5c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x201, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) pipe(&(0x7f0000000000)) 23:29:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x117, 0xa}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r3, 0x1, 0x30, 0x20, 0x8}, &(0x7f0000000380)=0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) close(r0) 23:29:47 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x10000000000000) 23:29:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$cgroup_int(r0, &(0x7f0000000000)={[0x32, 0x39]}, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:47 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0xfffffe95) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80000) socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getown(r1, 0x9) r2 = dup2(0xffffffffffffffff, r1) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000140)) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000040)={{0x3b, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x4, 'nq\x00', 0x0, 0x3e89, 0x4f}, {@empty, 0x4e20, 0x2000, 0x5, 0x3f, 0x1}}, 0x44) 23:29:47 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) timer_create(0x7, &(0x7f0000000100)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000000)="e685a0f2465ffbef946eee58abf99618409ae9cbdd815da1fd29a0488b3e02ed5659e0f8f6d1ccbd3ddfbec5a2629b599e0089c1e3a2a7290cb523ce5f904e86190fb6cb998a78491d18a57ca2564e382f37ccdfdbe936695c5a9cb730e340f6773f6f7b3396efd9b34d62bfbe43bda61d8354434b07f85ec481d53abc4c419b1af2ca80f4aadfb190687cc884fd8b6e08896f762f7a3ba13fb7193ca21e765b1b", &(0x7f00000000c0)="fa59096f3532a276b924dad2419337fbfd04ff91fdd52cb7f5fc"}}, &(0x7f0000000140)=0x0) timer_delete(r0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:47 executing program 0: r0 = gettid() r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0xc0002) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x69, 0x9, 0x9, 0xfffffffffffff67e, 0x0, 0xa3b, 0x14040, 0x4, 0xfffffffffffffffe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3ff, 0x6, 0x12, 0x4, 0x101, 0x8, 0x66f7, 0x2, 0xfed, 0x6, 0x7f, 0x6, 0xfffffffffffffff7, 0x7f, 0x4, 0xa, 0x10001, 0x5, 0x83d2, 0x81, 0x9, 0x0, 0x3ff, 0x7, @perf_config_ext={0x800, 0x401}, 0xc, 0x400, 0x9, 0x7, 0x46, 0xff, 0xf67d}, r0, 0x7, r1, 0xb) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x0, 0x10) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000001c0)="f47b7147a0c79161968121e68de6bb409ef2eac19ecc726bd5ab8c7574793d3772e77e30a1b02bec2be6962be6d2cac19446d5eb2b60a01683c7d89d5f4ef0b76f34488b04ba8af94d0332dfd8f0b795474e34a1c93835d21797b22b0983a674049b4d0c38c3ae1eb23c5d9c7049e671d6") getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) sendfile(r3, r3, 0x0, 0x7) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105517, &(0x7f0000001000)) 23:29:47 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000000), 0x1) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = socket$inet_dccp(0x2, 0x6, 0x0) fsync(r0) 23:29:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) [ 452.373987] sg_write: 24 callbacks suppressed [ 452.374011] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 452.374011] program syz-executor5 not setting count and/or reply_len properly [ 452.379403] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 452.379403] program syz-executor2 not setting count and/or reply_len properly [ 452.412507] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 452.412507] program syz-executor3 not setting count and/or reply_len properly 23:29:47 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x100000000, 0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:47 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 23:29:47 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000280)={0xffffffffffffff9c}) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x2, 0x8, 0x100000000, 0xb, 0xf, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x0, 0x5, {0x6, 0x33, 0x2, 0x7, 0x0, 0x7, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@dev={0xfe, 0x80, [], 0x19}}}, @sadb_x_filter={0x5, 0x1a, @in, @in=@multicast2=0xe0000002, 0x7, 0x4, 0x4}]}, 0x78}, 0x1}, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="56000000ed10546eef92f1ba5de86fea1cc20853ca0eff3882d05e6141634a062462a662a1f437dd70eeacdded4a44961da445c81a76f52c26b320ede83700edf61f80e352c789daa21a1812c0e4add3ab7525046035495b6bf55aaf8bc7a9d4fae110e1893b29e39a1cc2a4c8dfefb5721c9b1d8c651e858879f1d7be0f43e8aa68fe95778a55d4f2792cb14d0f21dd3c6b5903e087"], &(0x7f0000000140)=0x728d44d66025bb28) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20}}, 0x4, 0x4, 0x0, 0xc00000000, 0x6}, &(0x7f0000000240)=0x4e) socket$packet(0x11, 0x3, 0x300) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) 23:29:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000008000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x117, 0xa}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r3, 0x1, 0x30, 0x20, 0x8}, &(0x7f0000000380)=0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) close(r0) 23:29:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffffae92709f000000000000000000000000000000008200000000000000000000000000000000000000000038000000000000000000"], 0x314) [ 452.628274] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 452.628274] program syz-executor5 not setting count and/or reply_len properly [ 452.664330] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; 23:29:47 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8cff590b70738ad4d46ed8ebd675215c", 0x10) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 452.664330] program syz-executor2 not setting count and/or reply_len properly [ 452.673964] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 452.673964] program syz-executor3 not setting count and/or reply_len properly [ 452.710356] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 452.710356] program syz-executor5 not setting count and/or reply_len properly 23:29:47 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x204000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/120, &(0x7f0000000180)=0x78) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:47 executing program 2: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff0000000000000000000000000000000082000000000000000000000000000000000000000000380000000000000000002a8f2f402bc07dcfb0129116b394c4c19fe00fcfad7ea8c82317419993dcd4ca8a632cf60f0c1c62c3682444f42b350a870676e12d829ccd14652906cdeee70f8f88e175e5f58877edffe70d37bfc6c2bb4774be3e2951d6090cedc776ac4f2c42fbd3b9d2c067b7c5472dd44e6486f98715f410309472109b075b0ce49ec73ed8ca0000000000000000000000000000"], 0xffffffffffffff5c) 23:29:48 executing program 7: r0 = socket$inet6(0xa, 0x7, 0x200000186) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x244a00, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000003c0)={{0x4, 0x6, 0xcda, 0x7f, 'syz1\x00', 0x1f}, 0x0, [0x800, 0x100000001, 0x3, 0xa37, 0x737a, 0xfffffffffffffff9, 0x1, 0xced, 0xffffffff80000000, 0x1f, 0x1, 0x7, 0x5, 0x0, 0xd3, 0x5, 0x6, 0x8, 0x1, 0x7, 0x0, 0x7fff, 0x400, 0x5335, 0xffffffffffff0000, 0x1, 0x1fd, 0xb5, 0x1, 0x7ff, 0x8, 0xffffffffffff9d6e, 0x7, 0x0, 0x101, 0x0, 0x6, 0x94b6, 0x3f, 0x48a, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x800, 0x36d4000, 0x200, 0x7, 0x9, 0xfffffffffffff4c1, 0x8, 0x2aec0000000, 0x3ff, 0x8, 0x100000001, 0x3fb3, 0xfffffffffffffffc, 0x100000001, 0x438, 0x6629, 0xedc, 0x9, 0x1f, 0x7, 0x3, 0x0, 0x3, 0x213930ea, 0x9, 0x200, 0x7, 0x8000, 0x1a8, 0xcd, 0x4, 0x812d, 0xff, 0x80, 0x6, 0x100000000, 0x401, 0x1, 0x2, 0x8, 0xbbad, 0x2, 0x9, 0x40, 0x7, 0x3, 0x7ff, 0x50, 0x1fd, 0xfffffffffffffffc, 0x2, 0x0, 0x3ff, 0xe45, 0x7, 0x3, 0x2, 0x7fff, 0xffbf, 0x10001, 0x10000, 0x100000000, 0x8, 0x1000, 0x0, 0x8, 0xffffffffffffa6ce, 0xa30a, 0x5300, 0x5, 0x4, 0x7, 0x400, 0x3ff, 0x6, 0x20, 0x4, 0x40, 0x7, 0x4, 0x9, 0x1, 0x9], {r3, r4+10000000}}) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r3, 0xc8, "1c5ab262a610990724f9bb28557b8f02039980e87f2147090bd3fad3adbe5d64e0c5153e3ec4bab6fe471ded104c93304686923c07b2f97a3c9761cea452a2df69343689e8919b4b9552846fdab90a106b2d3adee088100b5fc7ae31e3f51c02b834d5fa664cd600fcb3658f406cd69eeab7260b602def8c7c65a2392e6260c2dbd14b3c75e9277b7b500ebeaf882ce9d0df7f3e7dcfa30905ea5ae4ecf1841b248b48bc5bd00ff079db3dfd5cb8442e8e7688f8c2ebdf1c792640df81853536170206775d704f45"}, &(0x7f0000000240)=0xd0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x200, 0x10000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffffffff9, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x54, 0x6, 0xffffffffffff7fff, {0x9, 0x4}, {0x100000001, 0x82}, @rumble={0x9, 0x1}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x117, 0xa}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r3, 0x1, 0x30, 0x20, 0x8}, &(0x7f0000000380)=0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) close(r0) 23:29:48 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000761000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:48 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc)=0x6a, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 23:29:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x22000) mknodat(r1, &(0x7f00000002c0)='./file0\x00', 0xe0a2, 0x80000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") timer_create(0x2, &(0x7f0000000080)={0x0, 0x9, 0x1}, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) clock_gettime(0x0, &(0x7f0000000000)) 23:29:48 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x8000) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0xfffffffffffffff7, 0x4, [0x0, 0x1ff, 0x5, 0x40]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @rand_addr=0xffffffff}}, 0x7f, 0x6, 0x3f, 0xe949}, &(0x7f0000000340)=0x98) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x3, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, 'yam0\x00'}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r3, 0x1000) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x9000, 0x3, &(0x7f0000540000/0x9000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 453.255241] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 453.255241] program syz-executor5 not setting count and/or reply_len properly [ 453.287554] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 453.287554] program syz-executor2 not setting count and/or reply_len properly [ 453.288319] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 453.288319] program syz-executor3 not setting count and/or reply_len properly 23:29:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000000)) 23:29:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x14) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff0000000000000000000000000000000082000000000000000000000000000000000000000000380000000000000000001e8556d2565093e0cc4a0894e37cd3c63ac0b5a3ab6acb511243721ee8ed4271ea188704aee8ce634e874419909a5d8f5a7920e8"], 0x314) 23:29:48 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) mlock(&(0x7f0000f42000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000534000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:48 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900)}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r2 = fcntl$getown(r1, 0x9) wait4(r2, &(0x7f00000001c0), 0x3, &(0x7f0000000240)) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:48 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) socketpair$inet(0x2, 0x80002, 0xffffffffffff0bfe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000040)="ec44e4a856b974938181b07fa3602d17349c3499e839e32e1abdb5144f72804e74d60f70ed965ceb681804178aadbeabf68e76fe9d7a3fa4e91cf55d73bef27c5fbfa4a3d96433f0d54bc87fcec9b48e006877942d17b19c33545ef0812a4ca68267d5aa994d992b6e1194fd279ef060be845cc3b8afe3e6d78ffa14bc535ab47e65aaeae1cbabbd8d3a9ed9e7ea11c34eba1b3d") 23:29:48 executing program 6: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000100), 0xfdea) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x800) r2 = request_key(&(0x7f0000000380)='pt\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000400)="766d6e6574302a00608d9597db73c5e616daca5b0a4f2c91c6c0d80e6fe049b4863f460cab0431a1ae218b7244e6e6dbb6a6b5b0814f72d44e742620246703c6dff2378ad8728ad8d52ccd2dcc1f7702ca6f", 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x40000) read(r1, &(0x7f0000000080)=""/57, 0x39) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x8, 0x2}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r3, 0xaa0, 0x7fffffff, 0x10001, 0x800, 0xffff}, &(0x7f0000000200)=0x14) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) finit_module(r0, &(0x7f0000000240)='vmnet0*\x00', 0x2) socket$inet_sctp(0x2, 0x10005, 0x84) 23:29:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) r2 = open(&(0x7f0000000000)='./file0\x00', 0xe4080, 0x100) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000500)={0x1, 0x1, &(0x7f00000002c0)=""/244, &(0x7f00000003c0)=""/31, &(0x7f0000000400)=""/246, 0x6000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x100ffd, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) accept4$inet6(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c, 0x80800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}, {r2, r3/1000+10000}}, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000140)={0x3, 0x4, 0x7fff, 0xffffffffffffff00, 'syz1\x00', 0x90}) 23:29:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x117, 0xa}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r3, 0x1, 0x30, 0x20, 0x8}, &(0x7f0000000380)=0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) close(r0) 23:29:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x2003b2f611aa0c56) write$eventfd(r2, &(0x7f0000000080)=0x7fff, 0x8) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000000c0)=""/56, &(0x7f0000000140)=0x38) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:48 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x0, &(0x7f0000000000)="9d82d3c1ae737bb152c1b5957a78456b8a811cabb84d43267fcff3d53f9681b3f50597a2bdbd6f511accedaab6") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004008000000000000000000000000000000000000000038e20000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddc6a504f8617f4c9c6b30c9ff20bd07e425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc0000000000"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000002c0)={0xa6, ""/166}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:48 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x14100, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x50000) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000100)=""/234, &(0x7f0000000200)=0xea) 23:29:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x117, 0xa}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r2, 0x1, 0x30, 0x20, 0x8}, &(0x7f0000000380)=0x18) close(r0) 23:29:48 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) 23:29:48 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = socket(0x12, 0x80007, 0xff) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:48 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x100, 0xfffffffffffffffe) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4, 0xfffffffffffffffe) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000001080)=""/4096, 0x1000}, &(0x7f00000000c0), 0x6}, 0x20) r3 = fcntl$getown(r1, 0x9) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f00000002c0)={0x3, 0x100}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000140)={{0x8, 0x5, 0x7, 0x268, 'syz0\x00', 0x8}, 0x3, 0x1000030a, 0x7f, r3, 0x4, 0x9, 'syz0\x00', &(0x7f0000000000)=['selinux\'md5sum\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x48, [], [0x7fffffff, 0x6, 0x6776, 0x6]}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x2) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x8) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:49 executing program 4: mbind(&(0x7f0000f83000/0x1000)=nil, 0x1000, 0x4000, &(0x7f00000000c0)=0x8, 0x8, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4200c0, 0x0) timerfd_settime(r0, 0x30087b90abac5a94, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f000067b000/0x2000)=nil, 0x2000, 0x8) 23:29:49 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) fallocate(r0, 0x20, 0x9fa, 0x8) socket$inet6(0xa, 0x5, 0xfa1f) r1 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200) r2 = syz_open_dev$dspn(&(0x7f0000000500)='/dev/dsp#\x00', 0xffffffff, 0x8000) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000540)=r2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x40000, 0x0) recvmsg(r3, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/86, 0xfffffffffffffffb}, {&(0x7f00000003c0)=""/222, 0xde}], 0x2, 0x0, 0x0, 0x3}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r4 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r5 = geteuid() ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0xcd1) ioprio_set$uid(0x3, r5, 0x3) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000005c0)={'raw\x00'}, &(0x7f0000000640)=0x54) sendmsg$inet_sctp(r4, &(0x7f0000001fc0)={&(0x7f0000000240)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd395defc5c67a8adce29d95a66cd4fd7822a6dd82d0615e2fc77d2cc07bb96c20c7289e2736e79aba1104e899725365e60ef347479f1f212f4e641bb626519f8c5ee906d436c58e1144cabb59ccdd15356bb8e395244869bb7805fbc18dc8b1df166", 0x184}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000580)={0xa, 0x4e22, 0x7fff, @local={0xfe, 0x80, [], 0xaa}, 0x8}, 0x1c) 23:29:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "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"}, 0x156) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x1, 0x40, 0x0, 0x9, 0x5}, &(0x7f0000000300)=0x14) accept$alg(r2, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000015e15)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0xa600, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x58], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000400)={r3, 0x94, &(0x7f0000000340)=[@in={0x2, 0x4e22, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xa}, 0x3f}, @in6={0xa, 0x4e21, 0x101, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffffc}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e22, 0x6, @loopback={0x0, 0x1}, 0x2}, @in={0x2, 0x4e20}, @in={0x2, 0x4e20, @multicast2=0xe0000002}]}, &(0x7f0000000440)=0x10) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:49 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x100) 23:29:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x117, 0xa}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) close(r0) 23:29:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x41, 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000200)='./file0\x00', 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x7, 0x1ff, 0xbeef, 0x10000}) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f00000002c0)=""/114) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c4600080000fdffffffff0000ac1b3a000000000000000000000000000082000000000000000000000000000000000000000000380000000000000000002726f8b8558d887272bec04e1a50878eb1d8a7b8e20f8f776f13188a2f7176a622b53f78da308e812f50583812ec7357ed1cb73e55"], 0x314) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0x4, 0x2}) 23:29:49 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80, 0x80800) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0x401) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x3) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) sysfs$1(0x1, &(0x7f0000000180)='/dev/snd/pcmC#D#p\x00') move_pages(r1, 0x4, &(0x7f0000000140)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005f1000/0x13000)=nil], &(0x7f0000000080)=[0x0, 0xb1a1], &(0x7f00000000c0)=[0x0], 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:49 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x8082, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000680)=[@in6={0xa, 0x4e24, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x383}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}], 0x2c) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x402}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c00000058561b8c5e2f6260331743ba7ee5e9b427b78c2c0fbfbc4ec59dcf3662f4246753ec30ec14fd0a303637e73c0c6223604b226e755d5625bccce14cb8e64feba30de4828c91aca58054f3bae39c617445fba762ed4ef51e448517113d2fe0576e9e3edb4eebe42f7f76403bdf844153eb4b50a7a7ad755d8221d008f653fe21881ea955a29ec5cd95e5175c405e", @ANYBLOB="080127bd7000fedbdf250500000008000500c8000000"], 0x2}, 0x1, 0x0, 0x0, 0x850}, 0x20004000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f000074b000)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x7f}, 0x3da) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000180)=0x8) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x10001, 0x321181) getsockname$inet(r3, &(0x7f0000000600)={0x0, 0x0, @remote}, &(0x7f0000000640)=0x10) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000380)=0x2a09, &(0x7f00000003c0)=0x4) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:49 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="b2164181730575bc584a02e29bf4cea9672455a05865c35d81bf2a3cda4df26d2d0170d9b099bc0b133711836f672a04f4a72d5bdb7d24b4bc808230c10defda8f9d8f3cc57404692a8269e94d86611944bedf37e1bfe17f9772811e7826751d62eb5d28306716c43b64f173ce209270430f14248c468b6c2a20c7a0df7310dfb4f8bf517956067826d0", &(0x7f00000001c0)="d0f3e8195e5f0f07be5ae22734170ad554027b14c0728cba7789fb3c10", 0x3}, 0x1e1) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000200)={0x4, 0xfffffffffffffd73}) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000240)=0x1) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xffff, 0x4000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) [ 454.484036] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 23:29:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x117, 0xa}}, 0x20) close(r0) 23:29:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x400, 0x40c000) setsockopt$inet_int(r2, 0x0, 0x1f, &(0x7f0000000140)=0x81, 0x4) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) r3 = open(&(0x7f0000000000)='./file0\x00', 0x81, 0x8) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000080)) [ 454.605468] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 23:29:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000040)={&(0x7f0000000400)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0), 0x0, &(0x7f0000000940)=""/42, 0x2a}, 0x202) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r1, &(0x7f000000d8c0)=[{}], 0x1, 0x0) sendto$inet(r1, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000003540)=""/68, 0x30, 0x10062, &(0x7f0000003640)=@hci={0x1f}, 0x707000) r4 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x410000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0xfffffffffffffffe, 0x2, {"f11317877b5ddc63555406deda641faf"}, 0x8001, 0x40a, 0x7}}}, 0x90) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000200)={{0x8, 0xf930}, {0x4, 0x7}, 0x7ff, 0x7, 0x1ff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x0, 0x10, 0x0, 0x10000000000001}, &(0x7f0000001000)=0x9f948d584ab2591c) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0xc1105517, &(0x7f0000001000)) 23:29:49 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000100)={0x401, 0x3, 0x8, 0x1ff, &(0x7f0000000040)=[{}, {}, {}]}) 23:29:49 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) r1 = add_key(&(0x7f0000000800)='ceph\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000880)="1cbad65dd43b2fcf6f5e05a252a0523fb120356c78682e5c77fe02bbd89abe1e3028af3ea16cd65a32e0ca395b453a48272f72d19dcc395f22518c57d5a7fdccd4112df030bd4e671f1484f35a7da7bc55f7a5fdc65b8711674cc3b01c731fa554d6bf3b464a5af49ac50bd71a40f65d441e3df6134791f105", 0x79, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="caf3d24063d1f12cb00e43369acf19396e577abdce3f246a76e3c206a44ee906c9e41da0e0e38687bbbddeaa43169a579abdd299bd9601c0f3304f5ce93f0db79e35ea55acb615f028d17ef4568ec87e46ed0e1d42f9e1cf1eb0aedf75130f4169", 0x61, r1) r3 = add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000780)="f306b4cfcbf509dd9c4bc6f652af8722e8b8ad36b7211b54357f37c5efd1aaa79c2270c550580b53a0e443c175985c2f1ee59ac53d9fc333133bbca2d395b55b9c2fe523f6e797c82cefaf533ef66ce515bb49b7b4ddef85babdc2532d61af568c8bceb43895a611", 0x68, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r2, &(0x7f00000006c0)=[{&(0x7f0000000380)="5df5d55a915b346e7f0165f055b91082e1c4a67242cf52deaabe162c211a0a8dfa3a4a0ae5697202ce787036309e58de77b47eab5e71a0b6eb98df2661d38ec7ab29fa5efa44cf6d1668a54d8d3d5aa2ff0008d3fec585e4030195b55b74aa827dae687ae2b9d77b04e1b245b9f3ffa07cfc1a45d4613b710fcb8d6f6f7b6d1cc4acbd08f13fbe9c3096273c819c8b6769f406b5d9f511ce79ee70217e6511af2d4363981df4a470db9c517fe894677d4b3fb2c67a71f84c380e47617b72b7266fe2717b04f1f62eaaa7d12dcdc4849b45c8", 0xd2}, {&(0x7f0000000480)="9a01ccd19ab28596c34634408502a2a48099674825c955f00db890fa88a67cb0cc85fbed3742d9f22353cf728fe42a65a6f4eed6076da20f0ad25318bc0b97902121203a318171a8a3077a14c256ec5b289be53ad50067b7e98ab8d5ca3bf1", 0x5f}, {&(0x7f0000000500)="232257a1bae8bb36ba998431e2f9bec029838d209617ab4bdd6dcdcb6417bdeca538d6199b159c788801ae20b6aea148f352a506fa801d5065183af5237b6690d91e5b298abbc5ea4b2d632ae03bbbee9c9df5c8647ffbeab74ab3e37a6a5a74b943df025827b60a84da425b7dc52db7ea3665efb298910a4c4d46a062b992ee7b4dcdd5dd2fc5ae953b24010f601dfc54df061c382ca702a98cac4e4baea48424450235f39c490e5ed4aabc7e3946aad45aa645391dcad373c9a4342f0ffa0ae2635a1b652c26e13a689e3dbe404bca06f45267f51019168dc9b3349589794facbed2f4a74d", 0xe6}, {&(0x7f0000000600)="918e10f6664eae2a78bbdd0cca3f08aa64fbab631e3f2b68df3a1b242bac1eccdab38953bf9280a764691066bffde29c05d84a3211570dcd0293517c211dddea89b0cac2a1bea9182114b8d77e8c6b56890ae372c728f0719ad2fd641d27a2385bf21275402d61d002dcedd39ac1eb634229a517a98c9a2c8f52888ea88be1ce797ef5ddddd9659e44265a47a8a5b5f46427da426351", 0x96}], 0x4, r3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) ioctl$void(r0, 0xc0045878) open(&(0x7f0000000900)='./file0\x00', 0x2000, 0x1c0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r4, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) ftruncate(r0, 0x200) 23:29:49 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) setitimer(0x0, &(0x7f0000000240)={{0x77359400}, {0x77359400}}, &(0x7f0000000280)) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x2000, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x600080, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000400)={r0, r2}) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000300)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f000023afe8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x1, 0x1, [@multicast2=0xe0000002]}, 0x14) sendmsg$inet_sctp(r3, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:49 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x600000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) tee(r0, r2, 0x4, 0x1) 23:29:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) close(r0) 23:29:49 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000ec1000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008913, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600080000fdffffd7e9c5050000001a000000000000000000000000008200000000000000000000000000000000000000fcff3700355c4e7fe31f9e926e19fbf30a2607b79e57670d094633ee5294b123ae0b1d671be10e677659f341cc1e255fea6b650845d9e1ff923c4a368e1c810040454e4b49042d83e36341c660e7964b639de67619e2f5060983bf4fe44e867f407d6df133b73f44584df6cc787806d359a67b961612cc2bff4cac28fb99873fc70653596a16698bf6fbd40e6def1e1cbcd120b5824ae1d32d31a17b7d6b84b9c72724920a41cdf963ae6222ffb7c9b208346df736da903c0b1a204d0cbcc30a0e4a8d01dd947f0f14c9374c753ccf163e5ed9ff644c4b7dc565702bb24b7cc9a0dfc5f3a3f04dc8648019cfbb0c92a5c69e5931d67ce3bdc02654d11923f798402d5b724eddf1d18a6d8e29a22d41d922817ab66720e6771cfe896c292f7d035b31fda477823939e3"], 0x314) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)) 23:29:49 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x1000, 0x3, &(0x7f00004b8000/0x1000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x5, 0x15, 0xea, 0x1f, 0x1, 0x7f}) 23:29:50 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r0, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) r1 = socket$inet(0x2, 0x7, 0x9c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000240)={@mcast1={0xff, 0x1, [], 0x1}, 0x100000000, 0x0, 0xff, 0x4, 0x7f, 0x80000000, 0x7}, &(0x7f0000000280)=0x20) getsockname$inet(r1, &(0x7f0000000000)={0x0, 0x0, @multicast1}, &(0x7f00000002c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00'}) 23:29:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) close(r0) 23:29:50 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x3d) mremap(&(0x7f000076b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000839000/0x4000)=nil) r0 = shmget(0x2, 0x4000, 0x40, &(0x7f00007b0000/0x4000)=nil) shmat(r0, &(0x7f0000e9c000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x148085}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x800, 0x70bd27, 0x25dfdbfb, {0xb}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40884}, 0x40) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2f8d}, &(0x7f0000000040)=0x8) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x200c, &(0x7f00000000c0)=0x2) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r3, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, 0x1, 0x0, 0x7, 0x7, 0x8}, &(0x7f0000000140)=0x98) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000002c0)={0xbc, @rand_addr=0xfffffffffffff000, 0x4e23, 0x2, 'sh\x00', 0x8, 0x0, 0x28}, 0x2c) 23:29:50 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2480, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000e26000/0x4000)=nil, 0x4000}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x111000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x74, r3, 0x412, 0x70bd26, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback=0x7f000001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffffa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffc}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40080) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff000000000000000000000000000000000000000000000000000063003800000000000000000000000000000000000000"], 0x314) 23:29:50 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x5b, 0x7, 0x3f}]}, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) seccomp(0x0, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x5, 0x8, 0x8, 0x8001}, {0x101, 0x3, 0x0, 0x3}, {0x5, 0xb7a, 0x7, 0x4be}, {0x7f, 0x7, 0x1, 0x100000001}, {0x9, 0xc00000000, 0x3f, 0x800}, {0x5, 0xffffffffffffbf5f, 0x100000001, 0xe4}, {0xfffffffffffffffd, 0x6}, {0x7, 0x2, 0x7}]}) 23:29:50 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) socket$inet6(0xa, 0x80003, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x220081) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x8}, 0x10) 23:29:50 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x181000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xfffffffffffffffd, &(0x7f0000000200)=0x2, 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$KDADDIO(r0, 0x4b34, 0xfaa6) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000240)={'nr0\x00', 0x8}) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '/dev/vga_arbiter\x00'}, &(0x7f0000000140)=""/110, 0x6e) 23:29:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) close(r0) 23:29:50 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x7) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) rt_sigreturn() sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd395defc5c67a8adce29d95a66cd4fd7822a6dd82d0615e2fc77d2cc07bb96c20c7289e2736e79aba1104e899725365e60ef347479f1f212f4e641bb626519f8c5ee906d436c58e1144cabb59ccdd15356bb8e395244869bb7805fbc18dc8b1df166", 0x184}], 0x1}, 0x0) 23:29:50 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$inet6(0xa, 0xa, 0x3f70, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc", [[], [], [], [], [], [], [], []]}, 0xfd88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:50 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x62, @empty, 0x4e23, 0x3, 'wrr\x00', 0x2, 0x9, 0xa}, {@multicast2=0xe0000002, 0x4e20, 0x2003, 0x1, 0x3, 0x101}}, 0x44) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) listen(r0, 0x5) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xffffffffffffffc1, 0x20000) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000100)=0x7ff) accept$inet(r1, &(0x7f0000000140)={0x0, 0x0, @multicast1}, &(0x7f0000000180)=0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)="b96d7940dbf19ec92bb3a131f9d75f7fc0c0de8c446f3146381b8f48aad23b3757945716c259c7c5ad1d4cca1506ba4057da08a34225fc82baf5a47dbbd6e9b958cf59bd2218891d812903eba844a97f8cd264b10560b900bb265a893041cf1e3ef70b0c7dd4b918944018c00da3abcb6106e1b3885733190a89fd82844ca107", 0x80) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb) 23:29:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) close(r0) 23:29:50 executing program 1: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff}) socket$l2tp(0x18, 0x1, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8100, 0x0) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f00000000c0)=""/109, &(0x7f0000000140)=0x6d) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000000)=0x9, 0x4) mremap(&(0x7f00007de000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084f000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:50 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x40040) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x28, {0x2, 0x4e22}, 'ip6_vti0\x00'}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x3, 0x4, [0x4, 0x3, 0x200, 0x6e69]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x400, 0x30, 0xb2b}, &(0x7f0000000180)=0x18) 23:29:50 executing program 0: r0 = open(&(0x7f0000000180)='./file0\x00', 0x28000, 0x81) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4800002}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="00022bbd7000ffdbdf25050000003c00030008000800000000000800010003000000080001000202090000000300000000000800050000000005080003000400000008000400060000000800040006a5ae1ed52ff6192ff93200000044000300140002006263736630a19a00000000000000000008000100000000001400020069726c616e30000000000000000000000800030003000000080007004e210000200001000c0007000a00000004000000080006006e710000080004004e200000"], 0xbc}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105517, &(0x7f0000001000)) r3 = socket$inet(0x2, 0x800, 0x3) sendto$inet(r3, &(0x7f0000000000)="e81ce12e9ef6f8657d41a63cdb2596e8c3d45459386d28d4c2a0c1d613301bb4b1121dd76d0de1542d29466d9dbfc1696eb6dbe9dcc30a742fa5a7086826638796a902b13b6a5352ec2b9e1f635b6c17ddf2c71434af19ab3e5d3f5af59bb143a698cf250d4c739d256a4a6028110d1091cd559d6b7c9538d31a51716d155a84471d70953e629507bc3c8c1073c2cd21e784b202c27056b7d83746b420a6661185cbc51841f0cd0d5d2959c28c297d5bc8e353d8aac9a979d474bed3747d981c3d8f8cb28ac8c31e23c179cd42a0c8df011ec9c0c041d6915097df28af613972f96fcc4930ae90c44e1417add5b76edcc2fdbe24f4d0", 0xf6, 0x814, &(0x7f0000000140)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 23:29:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:50 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000100), 0x313) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x1000}) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x40) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000040)=0x7, 0x7259b6fc, 0x2) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="7d7a05db8d29be2022d032484f4026ef9575619d3fb1e3b10bb1a81f18278135ab0c6bfa9207addcc379615496d91cdf023134e2d29a6bb10c737e1e8d0b77522dc9bc6a17") 23:29:50 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xf168979d57b0c5cc, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) syncfs(r0) r1 = socket$inet6(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") 23:29:50 executing program 3: close(0xffffffffffffffff) 23:29:51 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7, 0x880) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x102, 0x70bd2b, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x9cb177907c0727f3}, 0x4000040) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x3000, 0x3, &(0x7f0000e82000/0x3000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)) r2 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)="f95b8d53c68635ddac09ac9a9331cb0b86afa800000000000000819e373521", 0xfffffffffffffffa) sigaltstack(&(0x7f0000fb6000/0x1000)=nil, &(0x7f0000000080)) keyctl$get_keyring_id(0x0, r2, 0x5) 23:29:51 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000ed5000/0x3000)=nil, 0x3000, 0x13) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 23:29:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000040)) 23:29:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xe400, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) 23:29:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3ff, 0x400000) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000140)=0x80000001, 0x4) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000200)="1f5e823eaf7962625da013b4bd31bbd91688bf0fe53a2a2d05b4163e160c96c9f8925832d40b579af15cd3e4c59ebbf1e3d26aa9b8fbdad8d4048faeaba87a3333a60843a6c0f7a1ddee2796fcae693a4410f033f8f57af23a8d76c620130c21865338307e1c14779353e8c14f9beec1407a66220b6c52e2a8445b1985ba48d5d53ec52982c7f1ea37b864d9e10dc58e7e1394faf382556cf6d8cca1c545b0b8a8748be434c7012b8e19384819061c39933f28234e9778857e480bc5dd1ac912d4cd4de4b43f0ad8fc5e33652f07e7424302efc367ef568c8c49a7f5c4fa60c49e676ba1659149bf7f059600b97021dfe7d7443ff81585a2c0f7547bd1", 0xfd) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80800) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x314) 23:29:51 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20c1) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000280)=0x6, 0x4) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x368) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000001c0)={r0, 0x0, 0x4, 0x3, 0x4}) sendmsg$inet_sctp(r2, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:51 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200400, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000000009) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x89) ioctl$BLKRRPART(r0, 0x125f, 0x0) 23:29:51 executing program 6: r0 = shmget(0x2, 0x2000, 0x412, &(0x7f0000e52000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x420000, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000040)={@dev, @loopback, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@loopback={0x0, 0x1}, r2}, 0x14) 23:29:51 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x670d11bdf0490225, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x8, 0x5}, 'port0\x00', 0x28, 0x448, 0x8001, 0x4, 0x5, 0x0, 0x1000, 0x0, 0x2, 0x7}) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd5) r1 = dup3(r0, r0, 0x80000) ioctl$VT_WAITACTIVE(r1, 0x5607) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x2}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) r3 = gettid() ioprio_get$pid(0x0, r3) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(0xffffffffffffffff) 23:29:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) r2 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x2, 0x100e}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:51 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x5, 0x4, 0x2, 0x200}, 0x8) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:51 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000000)) 23:29:51 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) 23:29:51 executing program 6: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) shutdown(r0, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x8001, 0x808}, 0xc) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x18, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)={0x303, 0x33}, 0x4) timer_delete(r3) 23:29:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff000000000000000000000000000000008200000000000000000000000000000000000000000038000047ae4d54f8711c"], 0x314) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400000, 0x0) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000080)=0x1) 23:29:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:52 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0xc000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x8}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:52 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x169, &(0x7f0000000280), 0x17d, 0x0, 0xc9, 0xfffffffffbfffff7}, 0x0) r1 = memfd_create(&(0x7f00000001c0)='em1(\x00', 0x3) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000240)=0x3) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e22, 0x0, @empty, 0x4}, 0xfffffffffffffedd) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) r3 = socket$packet(0x11, 0x3, 0x300) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0xffffffffffffffff, @ipv4={[], [0xff, 0xff]}, 0xfffffffffffffffa}, 0x1c) sendmsg$inet_sctp(r2, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="15c1de2115d921cba54a8af4367547e85585dbd6cf22e2e5887e6c0f2d69dd3b9c514b6f31d8a8e01631d984947bc0ad5413cc0b681c855f7768dca8e07b6ac8360feb811235edbf5411450e9c73b2d8ef2b11495a5661c2baf1f1b11589d5aa4dba60ffe5e56b687708561f4607020a1ffb106b969e394b74274a99b0ecce085e177995a6241c7951128dd98ca245231603b8966f99caa6dd4a3e6682490219ec56f1ac25d789b16d8d6176055eb22c35c69cbe862bf9bcdb4b3d2804ea34ba90131b4d3beff3e4028cd30fa832775b1d5909bc5741ac950c366cc248441788b9daa7a9fc0a578b431de42b76378f4e2ffb414de404ccfa01c293b75bd56d004ddaf787e9b1800c68979031493b0c922656186319ebb9bc05facd0ac0c3def7ef1dd395defc5c67a8adce29d95a66cd4fd7822a6dd82d0615e2fc77d2cc07bb96c20c7289e2736e79aba1104e899725365e60ef347479f1f212f4e641bb626519f8c5ee906d436c58e1144cabb59ccdd15356bb8e395244869bb7805fbc18dc8b1df166", 0x184}], 0x1}, 0x0) 23:29:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f00000000c0), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:52 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:52 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000714000/0x1000)=nil, 0x1000, 0x7f) 23:29:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) close(r0) 23:29:52 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x480) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x2, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x7, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, 0xc5}}, 0xffffffffffffffff, 0x7, 0x8, 0x6, 0x84}, &(0x7f0000000080)=0xffffffffffffff2f) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x10001}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={r2, 0x0, 0x3}, &(0x7f0000001000)=0xffffffffffffff3e) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) 23:29:52 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) sendto$inet6(r1, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c465600040000000000fe000000000000000000000000000000004000000000000000000000000000000011000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d6b442a7771611f5d711defb96bca30200000002000000e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b040055714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083fbba86905acf18878cf618e495252a6a7077b8d557100000000"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1, 0x20000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000440)={@local, @rand_addr, 0x0}, &(0x7f0000000480)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @broadcast, @local}, &(0x7f0000000500)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x27c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {0x3}, [{{0x8, 0x1, r4}, {0x260, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x3c, 0x4, [{0x1, 0x200, 0x1, 0x8}, {0x40, 0x1, 0x8e0000000, 0x6000000000000}, {0x2, 0xcbb3, 0x2, 0x1000}, {0x1, 0x7f000000, 0x4, 0x2}, {0x0, 0x0, 0x9, 0xffff}, {0xffc0000, 0x3, 0x9, 0x7f}, {0xffffffffffffffe1, 0x100, 0x8, 0x7}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xffffffffffffffff}}, {0x8, 0x6, r6}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0xc209, 0x19a8000000000000, 0x81}, {0x1, 0x0, 0x800, 0xa37e}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x7}}}]}}]}, 0x27c}, 0x1}, 0x4000) ioctl(r0, 0xfa, &(0x7f00000000c0)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000800ffffff010000000000000000000010000000000000000000390000000000aa9071830692c95f73800000000000000000000000"], 0x314) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x440002) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) [ 457.840948] sg_write: 36 callbacks suppressed [ 457.840972] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 457.840972] program syz-executor5 not setting count and/or reply_len properly 23:29:52 executing program 3: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x5b, 0x7, 0x3f}]}, 0x10) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) seccomp(0x0, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x5, 0x8, 0x8, 0x8001}, {0x101, 0x3, 0x0, 0x3}, {0x5, 0xb7a, 0x7, 0x4be}, {0x7f, 0x7, 0x1, 0x100000001}, {0x9, 0xc00000000, 0x3f, 0x800}, {0x5, 0xffffffffffffbf5f, 0x100000001, 0xe4}, {0xfffffffffffffffd, 0x6}, {0x7, 0x2, 0x7}]}) [ 457.945859] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 457.945859] program syz-executor5 not setting count and/or reply_len properly 23:29:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdfffffffff1ffff000000000000000000000000000000008200000000000000000000000000000000003800000000000000000000000000"], 0x314) 23:29:53 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) socket$nl_route(0x10, 0x3, 0x0) 23:29:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)=0x18) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:53 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) getresuid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioprio_get$uid(0x3, r0) 23:29:53 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = getpgrp(0x0) ptrace$setsig(0x4203, r0, 0x9, &(0x7f0000000000)={0xc, 0x8, 0x800, 0x7}) [ 458.118886] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 458.118886] program syz-executor2 not setting count and/or reply_len properly 23:29:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x2, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:53 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x40) getsockname$inet(r1, &(0x7f0000000080)={0x0, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f0000001000)={0x3, 0x70, 0x0, 0x0, 0x1, 0x1ff, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x100, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r2 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x4, 0x7, 0x101, 0x1, 'syz0\x00', 0xc5}, 0x3, 0x20000444, 0x6, r2, 0x6, 0x5, 'syz1\x00', &(0x7f0000000180)=['!+bdevwlan1eth0securityem1[mime_type&procvmnet0\x00', '/dev/input/mouse#\x00', '\x00', '/dev/input/mouse#\x00', "766d6e6574312e1d76626f786e6574302c6d643573756d2c6d643573756d7b76626f786e6574306e6f6465767b00", '/dev/snd/controlC#\x00'], 0x96, [], [0x6, 0x6, 0xe8c, 0x7]}) 23:29:53 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@empty, @multicast1=0xe0000001, 0x1, 0x3, [@rand_addr=0x10000, @dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x16}]}, 0x1c) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) sendto$inet6(r1, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c465600040000000000fe000000000000000000000000000000004000000000000000000000000000000011000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d6b442a7771611f5d711defb96bca30200000002000000e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b040055714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083fbba86905acf18878cf618e495252a6a7077b8d557100000000"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:53 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e9000000a203a3989ff5393e6949ef7a9fb53975bf3931e6472e2c4d761317815c41bbe83d0a707a750bf3f1f21a8055af457902f9808b255b275855399cb97bad1c0b0ab34f704fe6c55d2675bb842212f75ef275ddb410b6108efb00c302b24f3f61f674d1f2e44620b2b509ce59cf538313b911b702dd1a1b232d08c67ae7a070bbe58de48100040000000000004a10ce190b2f7229477a9b15dc3ab9814998ad2ba99bd8e2df669b2fdce87a224160bef1d4682ea4cbb40a2dc31e7f74d8114635ee175b0b8f920df7ba3a57ad134cf44b5b743742121c25d725929d"], &(0x7f00000001c0)=0xf1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r1, 0x3}, &(0x7f0000000280)=0x8) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r2, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xfffffffffffffffc, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback={0x0, 0x1}, 0x8, 0x3, 0xff, 0x1, 0x4, 0x10001, 0x8}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) fcntl$getown(r0, 0x9) 23:29:53 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000e05000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000e27000/0x4000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x42, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x8, 0x4) 23:29:53 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f0000006500)=0x10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x5dc) recvmmsg(r0, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/98, 0x62}, {&(0x7f0000000700)=""/201, 0xc9}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000900)=""/237, 0xed}], 0x4, &(0x7f0000000a40)=""/106, 0x6a, 0xf4}, 0x2}, {{&(0x7f0000000ac0)=@hci, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/192, 0xc0}, {&(0x7f0000001c00)=""/23, 0x17}, {&(0x7f0000001c40)=""/140, 0x8c}, {&(0x7f0000001d00)=""/202, 0xca}], 0x5, &(0x7f0000001e80)=""/18, 0x12, 0x1}, 0x6}, {{&(0x7f0000001ec0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001f40)=""/247, 0xf7}, {&(0x7f0000002040)=""/105, 0x69}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/57, 0x39}, {&(0x7f0000003100)=""/84, 0x54}], 0x5, &(0x7f0000003200)=""/32, 0x20, 0x3}, 0x4}, {{&(0x7f0000003240)=@pptp={0x0, 0x0, {0x0, @multicast2}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000032c0)=""/143, 0x8f}, {&(0x7f0000003380)=""/44, 0x2c}, {&(0x7f00000033c0)=""/240, 0xf0}, {&(0x7f00000034c0)=""/15, 0xf}, {&(0x7f0000003500)=""/13, 0xd}, {&(0x7f0000003540)=""/111, 0x6f}, {&(0x7f00000035c0)=""/123, 0x7b}, {&(0x7f0000003640)=""/248, 0xf8}], 0x8, &(0x7f00000037c0)=""/181, 0xb5, 0x1}, 0x6}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003880)=""/161, 0xa1}, {&(0x7f0000003940)=""/178, 0xb2}], 0x2, &(0x7f0000003a40)=""/255, 0xff}, 0x6}, {{&(0x7f0000003b40)=@xdp, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003bc0)=""/180, 0xb4}, {&(0x7f0000003c80)=""/42, 0x2a}, {&(0x7f0000003cc0)=""/69, 0x45}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/238, 0xee}], 0x5, &(0x7f0000004ec0)=""/91, 0x5b, 0xd388}, 0x8}, {{&(0x7f0000004f40)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000004fc0)=""/220, 0xdc}, {&(0x7f00000050c0)}, {&(0x7f0000005100)=""/4096, 0x1000}, {&(0x7f0000006100)=""/192, 0xc0}], 0x4, &(0x7f0000006200)=""/161, 0xa1, 0x9}}], 0x7, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000006480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000064c0)=0x14) 23:29:53 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x1}}, 0x18) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) flock(r0, 0xe) 23:29:53 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$binfmt_elf64(r0, &(0x7f0000001080)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x3, 0x1, 0xde8c, 0x5, 0x3, 0x3, 0x4, 0x1b9, 0x40, 0xc4, 0x5, 0x3ff, 0x38, 0x9, 0x5, 0x1, 0xffffffffffffffe1}, [{0x0, 0x7, 0x81, 0x800, 0x1000, 0x1, 0x2, 0x7fffffff}], "ba906e5e63b73e024b37c6e1", [[], [], [], [], [], [], [], [], [], []]}, 0xa84) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) fsync(r1) [ 459.046850] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 459.046850] program syz-executor5 not setting count and/or reply_len properly [ 459.073264] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 459.073264] program syz-executor3 not setting count and/or reply_len properly 23:29:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0x82) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f00004ff000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r1 = msgget(0x1, 0x200) recvmmsg(r0, &(0x7f0000003680)=[{{&(0x7f0000000240)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/128, 0x80}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/5, 0x5}, {&(0x7f0000000600)=""/71, 0x47}, {&(0x7f0000000680)=""/213, 0xd5}], 0x8, &(0x7f0000000800)=""/164, 0xa4, 0x401}, 0x67}, {{&(0x7f00000008c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/221, 0xdd}, {&(0x7f0000000a40)=""/70, 0x46}, {&(0x7f0000000ac0)=""/132, 0x84}, {&(0x7f0000000b80)=""/146, 0x92}, {&(0x7f0000000c40)=""/148, 0x94}, {&(0x7f0000000d00)=""/124, 0x7c}, {&(0x7f0000000d80)=""/99, 0x63}], 0x7, &(0x7f0000000e80)=""/81, 0x51, 0x5}, 0x7f}, {{&(0x7f0000000f00)=@ipx, 0x80, &(0x7f0000002240)=[{&(0x7f0000000f80)=""/88, 0x58}, {&(0x7f0000001000)=""/14, 0xe}, {&(0x7f0000001040)=""/225, 0xe1}, {&(0x7f0000001140)=""/193, 0xc1}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x5, &(0x7f00000022c0)=""/108, 0x6c, 0x100000000}, 0x5}, {{&(0x7f0000002340)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003600)=[{&(0x7f00000023c0)=""/43, 0x2b}, {&(0x7f0000002400)=""/89, 0x59}, {&(0x7f0000002480)=""/96, 0x60}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/236, 0xec}], 0x5, 0x0, 0x0, 0x4}, 0x3}], 0x4, 0x100, &(0x7f0000003780)) sendto$packet(r0, &(0x7f00000001c0)="0b4a5d87c30b83006abfea6c187e66d18d03c2ce6d2fe5ca0c967cc6eca93249c65fd92e97a175038d78796ebbbf1504df6266487d336fa05d9c0f9ab6e3d8979a446c64b3941c22cd7c765e13bf810f02da3e299457a56f65d9df4c0bd3c8ada316556f247e46b10c81b593859fddf5bf80aae2e0d8f57f65bab4", 0x7b, 0x4001, &(0x7f00000037c0)={0x11, 0xff, r2, 0x1, 0xfffffffffffffff8, 0x6}, 0x14) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000140)=""/128) 23:29:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffff00000000000000008200000000000000000000000000000000000000000038000000000000000000e6739d317669d99b4d5b1dd57d6675fb14279e958fb749a3016e164b59f419f38f16fed4960d49782a604aa5c41d4f46f26be4c6d5422fb7a634d8f1"], 0x314) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xc4, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000001c0)={0x80, 0x5}) write$sndseq(r2, &(0x7f00000000c0)=[{0x392, 0x4, 0x3, 0x100000000, @time={r3, r4+10000000}, {0x9, 0x6}, {0x10000, 0x1f}, @connect={{0x9, 0x7fffffff}, {0x5, 0x257bd2bd}}}], 0x30) 23:29:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff4aa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:54 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x2, 0x2, 0xff, 0x0, 0x7fff, 0x5, 0x6}, &(0x7f0000000140)=0x20) r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrlimit(0x0, &(0x7f0000000400)) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="7f", 0x1, r4) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x23e, r1) keyctl$dh_compute(0x17, &(0x7f0000000340)={r5, r6, r6}, &(0x7f0000000600)=""/132, 0xff33, 0x0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 459.215163] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 459.215163] program syz-executor5 not setting count and/or reply_len properly 23:29:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) sendto$inet6(r1, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c465600040000000000fe000000000000000000000000000000004000000000000000000000000000000011000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d6b442a7771611f5d711defb96bca30200000002000000e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b040055714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083fbba86905acf18878cf618e495252a6a7077b8d557100000000"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:54 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000f1c000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) fcntl$getflags(r1, 0x1) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00004e9000/0x1000)=nil, 0x1000, 0x8, r2) [ 459.283772] sg_write: data in/out 2012/746 bytes for SCSI command 0x0-- guessing data in; [ 459.283772] program syz-executor2 not setting count and/or reply_len properly 23:29:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x2, @multicast1=0xe0000001, 0x4e21, 0x2, 'sh\x00', 0x2, 0x9, 0x40}, 0x2c) dup(r1) r2 = perf_event_open(&(0x7f0000001000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) dup(r2) 23:29:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffffb, 0x4000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:54 executing program 6: mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000e6f000/0x1000)=nil) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffff, 0x8000) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) [ 459.413622] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 459.413622] program syz-executor3 not setting count and/or reply_len properly 23:29:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x4, 0x3) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) [ 459.524303] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 459.524303] program syz-executor5 not setting count and/or reply_len properly [ 459.599806] sg_write: data in/out 262194/171 bytes for SCSI command 0x0-- guessing data in; [ 459.599806] program syz-executor5 not setting count and/or reply_len properly 23:29:54 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x2, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x4, 0x4) 23:29:54 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) socketpair(0x4, 0x807, 0x1800000000000000, &(0x7f0000000200)) mremap(&(0x7f00004e6000/0x1000)=nil, 0x1000, 0x1000, 0x2000000002, &(0x7f0000760000/0x1000)=nil) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80400, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@ethernet={0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}}, {&(0x7f0000000040)=""/62, 0x3e}, &(0x7f0000000080), 0x20}, 0xa0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000180)=0x7, 0x6, 0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)=0x8, 0x4) 23:29:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2000000000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040), 0x4) sendto$inet6(r1, &(0x7f0000000180)="040105000500000000000000ffb2", 0xe, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x800000000000d, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c465600040000000000fe000000000000000000000000000000004000000000000000000000000000000011000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d6b442a7771611f5d711defb96bca30200000002000000e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b040055714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083fbba86905acf18878cf618e495252a6a7077b8d557100000000"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:54 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000c29ffc), 0x2) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x8000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:54 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xe3, 0x2400) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffff001}}, 0x1, 0x3}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0x6}, &(0x7f00000007c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000040000000000027db175d1100028d00007f7a95dd"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x20000314, 0x465, 0x0, 0x465}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) r2 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r2, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r2, &(0x7f00008a8000)={0xa, 0x80004e23}, 0x1c) r3 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) write$vnet(r0, &(0x7f0000000a00)={0x1, {&(0x7f0000000800)=""/195, 0xc3, &(0x7f0000000900)=""/239, 0x0, 0x3}}, 0x68) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f00000005c0)={0xffffffff, {{0xa, 0x4e24, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffbff}}, {{0xa, 0x4e24, 0x3, @empty, 0xfffffffffffffffb}}}, 0x108) sendmsg$inet_sctp(r3, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x1f9}], 0x1}, 0x40000000) 23:29:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffc, 0x2) r1 = socket$inet6(0xa, 0x806, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x6, 0x5, [0x2, 0x4, 0x200, 0xe97f, 0x0]}, &(0x7f00000000c0)=0x12) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff00000100000000000000000000000000400000000000000000000000000000000040000000003800000000000000000062d8dba4fde972d4b82cb4fc13c7eca302aa39f27658fe4e37ae06756bf1b5c1a26b1e672141b89ee00e0594f22053529f74af9488c6896b577f808f7a430f916edae59982802ad27640f3bc612dab2e3b9f2ba81bc1"], 0x40) 23:29:54 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f84a9c4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb960000b06a1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, r1, 0x1c, 0x1, @in={0x2, 0x4e21, @broadcast=0xffffffff}}}, 0xa0) 23:29:55 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x311081, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/3, 0x3, 0x100, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @loopback={0x0, 0x1}, 0x6}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x0, &(0x7f00004c1000/0x2000)=nil) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffffffffffff0003, 0x80000) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="d0a6"], 0x1) 23:29:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:55 executing program 5: syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6d, 0x2000) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) lseek(r0, 0x0, 0x1) r2 = gettid() ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000280)) r3 = syz_open_procfs(r2, &(0x7f0000000200)="0003000000010000000e01ba8f9bbc4ea0b0c58b94bcd034fd3928b583bdcebd2ff2a7ae8a9e8a6287a829adc70bcb7cdf68119e08c352351ba069a634") fcntl$notify(r3, 0x402, 0x31) exit(0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") getdents64(r3, &(0x7f0000000140)=""/57, 0xf011a9bed9024b39) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x117, 0x1009}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000001940)=ANY=[], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r5, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f84a9c4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb960000b06a1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f00000002c0), 0x3, r1, 0x1c, 0x1, @in={0x2, 0x4e21, @broadcast=0xffffffff}}}, 0xa0) 23:29:55 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x6, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x18802) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff0000000000000000000000000000a4ff69000082000000000000000000020000000000000000ddac9700000000000000"], 0x314) 23:29:55 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) socketpair(0x2, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getdents(r0, &(0x7f0000000040)=""/4096, 0x1000) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x48100) r3 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000900)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000a00)=0xe8) getresgid(&(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) r6 = getpid() stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0, 0x0}, &(0x7f0000001200)=0x3) r9 = syz_open_dev$amidi(&(0x7f0000000c40)='/dev/amidi#\x00', 0xfff, 0x2000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000c80)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000cc0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000dc0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000c00)={0x0, 0x0, 0x0}, &(0x7f0000000e80)=0x3ee) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000bc0)=0x0) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000f80)=[0x0, 0xee00, 0xee00, 0x0, 0xee01, 0xee00]) r16 = getpgrp(0x0) r17 = geteuid() fstat(r1, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002a40)={0x0}, &(0x7f0000002a80)=0xc) r20 = geteuid() r21 = getgid() fcntl$getownex(r0, 0x10, &(0x7f0000002ac0)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000003680)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000e00)=0x2d8) r24 = getgid() r25 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000003100)={{{@in6, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000003200)=0xe8) getgroups(0x5, &(0x7f0000003240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) fcntl$getownex(r2, 0x10, &(0x7f0000003280)={0x0, 0x0}) r29 = getuid() stat(&(0x7f00000032c0)='./file0\x00', &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r31 = gettid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003380)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000003480)=0xe8) r33 = getgid() sendmmsg$unix(r2, &(0x7f0000003540)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000002c0)="81c125ddd5c95b304d10c8f39b94c6632fddad0bfacec67aedee817b2cc749cc81648cd5d535f2f8aa0df072c6549b3cfa462939b97a871a7118b75867f331e07db2f30579970df3500f88a70e7ec172a358d22cfd7bbbb77bbf289fdc551fa7e16afc85ae6a42c872b8226551d4f0eea341e34b636215a5f659937f0e434933a3f0bc", 0x83}, {&(0x7f0000000380)="03dce1f7ab9619e23b05671084338939b0512397d7605d25725d5114f7250aceec91fc91b04363c4888e8184c9af043e8b94aa6d018bef71ba7db0904f00bac9e4aaa991e0b3f1f2802b81cc8a5c5acb959f7025dd06459290af84dedca8cce95768d550f5b203a5f8ca76d94a5a0146e13c6513b076a85b171e710b7e48faf674dae01c83761ae1a4569e84080c34b5d45698f8074a6f4ffb2e7fe586aa82e20ed4dda073cdd70c91b9674ed0dcd47531814288a540e347813d169c99395d58849c6c", 0xc3}, {&(0x7f0000000480)="bb82b0874c2f52cd14fc9d70c52a034b8ea74e11b06bef74e4cddec5fc8f3cdceddd0a1ccdcccc15146523e2393bec", 0x2f}, {&(0x7f00000005c0)="3965e654963f95b27291f2db3d1a76aedd18722be372b7a488cea2a06fc86318c29e206a7092c76a4395164e157c78020f59e10b5203543d6d9c1b01554a923dc57baea3c3a93ebeb3b72b43ebf3b649ed8bc78cf13c3a617be7a38dd652d0", 0x5f}, {&(0x7f00000004c0)="8ea191c337ec769a677ce255830ecdb68b1c", 0x12}, {&(0x7f0000000640)="c1e7b960261865e86a53abd488d2184935644e6c10339868bf7f804d10d4456c82b63e632b7d264ad706055faffc6130952b1484dd81260595f01b0bd6bebe7d31e7191c943e", 0x46}, {&(0x7f00000006c0)="e5812b98c362200f925b357ec38912d13ec7d0b87295e6d87ec07d6c5c0833827c8c7780b5380acef078abe9c6f9a0133acb3e293c1574e0489d80df9ba440ea7dbe5719a454e94f3059ebea9a16dbe349dd84268d00224fdd68ce6bed190d4c56d1ce15d14a52a99666bc1e20dc96f07e500a274060920dc964f367be51cdc9d4a517df657888edbcffdaebd7dfe4740e6cf78e9a6b9c47048d892116cdd13944873658", 0xa4}, {&(0x7f0000000780)="fb30e1f958257ec3848582e9ea134d9409a2476b76af4bb9a07a2de36bf329e86ec83de6f2874db814f799aeb6705d17549c12e4698cf8a4de06694a6ff1088d85d6bb82700748d627b72b8bf7f8e0db7d2ebaf186e0197cf14ce39c35ae9b85429c5adab30374fd13849a9785d0918ed8fa5aed5d7b6000ef2581b4702ccf9107f156c7ba73e137e84f05f2a759240bd68fd6fdac60bd1d92981a853b8e256a945967f21f63ee7082e15d4b9564aa5ebb371f0d2e611b1c5863888ac0cba7cb17bfe917c627f08a86b87b11537f9d1d79a577aa", 0xd4}], 0x8, &(0x7f0000003c80)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="20000000000022000100007702000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="f100003d4d4a000100000055883980c8027a04e5d0ab8328f982f639edf6272237b80e1e9c2bc88ae330a5826769f10897f814643e256a4000efffe1c85449b5a7aeffd82d9f312c7569ea88024b40d0d8585519eb8cfb7ba6cbd1c53336eab78a9bfa112042c0fba6e7cbd069cd6c5883e0a1c5077b3c96a21a7081498a81fd8e3971887b00a89109b815a23a11e38dd76374573fae4ee4ae3b68820a4dcc6456ada05c931ec437b6d2860ecc41973cde8e0a9fe56720d65cc3ab3548859164edf2f98041a7", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000000000b4af7048e6980d79", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x158, 0x8000}, {&(0x7f0000001280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001300)="141f038dcd766ea55ec7fdda2676e58276afeebbff14a9f364ae0994345d973edf45ac23ed35213d60bc7e0836991d054ed4a3a5a2045d0fb29df3c2ece9c6c6ce005d1a6d5d9362a2c1090f593e5d21f771f7672b6e87c31ccb80650d9ebb48df8a64f2aeed8975d558f30b68cfb5c561bb68427c1b2f5b2e63726feb1ba214e62091e0d7a7fd76ff58c7a37ca9391709eb759b88932fd17e2c8eb5ca25f646e9f2c83553128d00d2f813f30b0e86eab80b199c73bb18beac4b4d033331d3b3f65e41cc9b06d43005c3bee42c97908042", 0xd1}, {&(0x7f0000001400)="8383b1b5a6aeffe75975e79fc5c83cf0d0ecf1da536f4c9b8612c5687ffa5c3adb655a177311f5eb4cb5148f38c368ca835047e5c713c7a1095c9e020738073f667c3ef94f03a95d628585321ca283dd4fd61b6d0c7cef6ed53bff755628f70cd31377bbd9b97210fea65413c27df838fe33880bf74bbf954cfaddb548487c322f47293d9d0864442b0b8c83b224c8d6f5353b8958498a72dddafca09826968a8006a0f87424c8bd42d6c48824ace83d8f099b4f7c44c90ffaa2a31f3e7d98cf9ea670751a682f4c8c77b0e4aa35853e043ed7a18e5a55a0c1d4cbfff421ba8ae8ed8fa25fbd85300eada18e48fbd5097147486892", 0xf5}, {&(0x7f0000000fc0)="e9d39ca5cf88ce27", 0x8}], 0x3, 0x0, 0x0, 0x880}, {&(0x7f0000001540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000015c0)="cf9f5d96337ef46cf5fb1fbead2471975e7fe55989f7704f1c8727c2f2288e871fcc6cdcd7c81c4842a23b4ffcf3aee9546534690d504957b2563f86c948b816f2089e5361b28c8db62950f281b0f70fcf3a03090438d531a236c9a30ad68f7b2f023784be1ead0319b74e407ee0a08c625162814d5dc6f6cabaa8aec9684b0a00a6b5ce9c65063f6ba2f00ff9621283d50adf2fee06521ea73b713b80ddd2b978b528de5831a3d0f4dcf4cad6f9508ddf9367ab011a378bfbe46869ee3fdab23dfb3ad318dc713ea6cad4d1db1b2cec6a73c59abd5adbbaae5f8f14", 0xdc}, {&(0x7f00000016c0)="85ad39d6770477b8b19198dd6266ef036317868d77a497f5b877d4ee3fb9b5a96007c2d6280dd7a2535a9229e8936c7f7af16562cf2e15600daa361af266a89feda7ea700de52c820b645b2b0e127bfe412bfadbe42a8822151f7b7376ee465a357b855a39656ed00f2e8449e6c0c96b3d3c99a3bd45016199e5039dc816bb", 0x7f}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="9de2932fe0e3a761f943134d6d7c23cad545315c8951ae2c4c5687a2318f031df7c3c968e6a458fd3c5c59bff40d5c74612f42ed4ec7358116b790d5573a641c67c73e802d3c8537e75371778b5591a7f79516d47385417ed1ad3fa7e255e4f6122d23fd8cfc85997dbdd20547e67cb4355d0a6a92fb5ed221b23ab3c4ce58f68e436889e4bdc5c838891192d8ca926815d1123c2552692f75ee634f0596761f884b2ced3b024ae24a7bcdee67601434271b5897c40862615733341a5b007056d4a691f71b2acdee7cf6903cd1d900", 0xcf}], 0x4, &(0x7f0000002880)=[@rights={0x18, 0x1, 0x1, [r0, r2]}, @rights={0x20, 0x1, 0x1, [r0, r2, r0, r2]}], 0x38, 0x8001}, {&(0x7f00000028c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002940)="282fbb1464f24f0a31b7db64f98a446ddd159085f055640c633d0611a1ebb54de72e1586b94b145508e199860d68c8149350b4c23c272bc000c68cc9882d5216c8eec03844b2bb6769bbb3f50b7d41935268a868cb1472f06924acb0e5f5b203ecaccea2a2461f36d49deff7277651172463c01b5eade3b4a3b7363da1fd63f93158baf1be8de8a1f75b9d5e0d68095c95d8e135734c03d2e77c33", 0x9b}], 0x1, &(0x7f0000002b00)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="000000002000006f00000000000100000002000000", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000001000000b88c1a7bd74eb51d308e506c16b5b8af544c18e658aee600000000000000000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0xe0}, {&(0x7f0000002d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002dc0)="b895bbc857a035a5bffd4f6eb1f11c0a10758ef82faa", 0x16}, {&(0x7f0000002e00)="b0231d6595f0764a93216daa8732f1d7422839e900b303de254e4aa20035242955ad1820a988ca4b22ee164eb9a8543e379559d5aa4ba2f5b74951428d4bb8db91c99c13fd2fc01b101f69e9", 0x4c}, {&(0x7f0000002e80)="ce4c8178257d637aea624deeb001ab66819e23465661358db179", 0x1a}, {&(0x7f0000002ec0)="e95c03279d8bacd59d8b724d68b78caeb1203aafbab3fa6631ff7fd24d05259966f1fd33f9cf9a2631a7f04bcd7b37986c40c692ad9482d28f64deaaac76a493c440965bfdbf1ec36762c7df72130d76f1b073d744d365f18c010c884c06dcdad5c72489e43fafddab8aa69b98f6236f064aac6df8fd96086dd31aedc6cf3aee5b850cb8d691602351faa8993f2b72b905119dfd322dc0eaca3eeaa78159dbea7545973b532e585a67b3766e58366bc0927bb6ec1e516b18606c1e9454d978f778cddaa55198716f494050", 0xcb}, {&(0x7f0000002fc0)="2f3e71f94805950c4dc97b0237ea3bd0924b1c55b57f945c59c74716834213b67967257572cba5a1dcb4498db8ce183d268978aeb0c7382f09cb765c1f4ff6c6f52ca2335217b71ca808ee69f0f41bb534ccfe9e1b44e660a0a8ac6a1eab4e75ef4c44d03a8eed2a2045eb3d560ab0662c291a4c0ff7fccf4f92e6ccc0bc989c6b048c35bb9b34ba0b28281ffc3ba914e5601149d92ca6a46f7f2d8a", 0x9c}], 0x5, &(0x7f00000034c0)=[@cred={0x20, 0x1, 0x2, r25, r26, r27}, @cred={0x20, 0x1, 0x2, r28, r29, r30}, @cred={0x20, 0x1, 0x2, r31, r32, r33}], 0x60}], 0x5, 0x804) memfd_create(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2) r34 = geteuid() r35 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r34, r35) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000040)={0x2, 0x1, 0x1ff, 0x1, 0xffff, 0x6}) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x0, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x587) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 23:29:55 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$cgroup_int(r0, &(0x7f0000000000)={[0x32, 0x39]}, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4c0000, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x3, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x117, 0xa}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={r3, 0x1, 0x30, 0x20, 0x8}, &(0x7f0000000380)=0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r2, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) close(r0) 23:29:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socket$inet6(0xa, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600080000fdffffffffffffff0000000000000000000000000000000082000000000000000000001c00000000000000000000003800000000000000000f895dbca200b3"], 0x314) 23:29:55 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400201, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x800, 0x4) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc)=0x200000000, 0x2a7) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000080)=0x5) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x4000000000000001, 0x2, 0x7, 0x8}, 0x2fb) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:55 executing program 6: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) 23:29:55 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvmsg(r0, &(0x7f0000005940)={&(0x7f0000000340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005900), 0x3a, 0x0, 0xc9}, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x80004e23, 0x7, @empty, 0x100000000000}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) sendmsg$inet_sctp(r1, &(0x7f0000001fc0)={&(0x7f0000000300)=@in6={0xa, 0x4e23}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000000000)="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", 0x184}], 0x1}, 0x0) 23:29:55 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x501000, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x0, 0x5, 0xfff}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x5) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000440)) r3 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f00000002c0)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000680)) ioperm(0x0, 0x800, 0x100000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) getsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x9, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000540)={'team0\x00'}) sendfile(r3, r3, &(0x7f0000000240), 0x20000102000007) getsockopt$inet_tcp_int(r4, 0x6, 0x0, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$LOOP_CLR_FD(r3, 0x4c01) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="98000000a0ad017bf4983862f1cc3113b69c553e174ef70155198c51a6b1b008000000a5d2f364ad3ffa1beccaa956936e5dc3afdec415a55c68244a4439b93972cca0ca66e84affaa0f30c4b3cb72a2681e9c34401a72dd616f40685b660cdf8d992b6cb0ac8c39abd10e73e87674a4281b582bb8c3030b099082b372965ccc4e1d27ab85710d69d0bbc2b732dfb324a81e019f09c7df292cbe396ccad969cc549d23e669962335b0edc48c991dca24fd666848620e979bfff60bb6e88b80e14e24"], &(0x7f0000000140)=0x2) ftruncate(r3, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x20002, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) unshare(0x40600) ioctl$BLKROSET(0xffffffffffffffff, 0x90000915, &(0x7f0000000000)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) 23:29:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xa3, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000140)="5747a080211e48565ef63dd6158a67937b22a9ad3698d25fb1eefeb8763a26df31e0a01e731b12068f1574bab7c93f77eebd301ce6e10ae6817000bfed682a0f7a3b911ff2cbc652b059da1ac56e7cae4c935e7067825a0362edf1415bc450d9534dd9acee792ad3cda4b66d85b3d7") socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4600080000fdffffefffffff6b66672da326c19b14627cdd39e50ba500000000000000e87d70810039f799a60f6d1000000000ea299eb000000010003884af0799da15ffed20b2ec1492b3e5ebaed86f39b36129302477d5adff3038847c8890be21cbabab82233f8f9d74cc0bf2a9d8ef9087000000000000000000000000000000"], 0x314) 23:29:55 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x10000) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000001c0)) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0xfff) ioctl$KDSETLED(r0, 0x4b32, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x8000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='children\x00') mremap(&(0x7f0000ee1000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000f07000/0x2000)=nil) madvise(&(0x7f0000882000/0x3000)=nil, 0x3000, 0x8) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000180)) 23:29:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0xbe, 0x80000001, @scatter={0x4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000140)=""/73, 0x49}]}, &(0x7f0000000400)="ec852ba6e433851eb589074fd641100cd2c2ee18ca20a11d226a651048465eb3a8723de63a0565c9efd1f3bab53e96b40aebaf4e6877202e732e3deae1ccdbff899cee4ad828af3ad2bad931266813cc7ce9f3af16a59c12c31240d6518df07f57497752605f90fe8d279c7abae0655a379597d13755e17fcf2a5d21192850996c6b8d9ee56369f86b85bf6def1919c58e4d62011197d6db8e7a2b5751ae9de5b475be7cb1d05ea0da9ac88285bd9efbe97cd12364f6185c71013291b9fb", &(0x7f00000004c0)=""/162, 0x4, 0x10013, 0xffffffffffffffff, &(0x7f0000000580)}) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) [ 460.950489] sd 0:0:1:0: [sg0] tag#5602 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 460.959477] sd 0:0:1:0: [sg0] tag#5602 CDB: opcode=0xec (vendor) [ 460.965778] sd 0:0:1:0: [sg0] tag#5602 CDB[00]: ec 85 2b a6 e4 33 85 1e b5 89 07 4f d6 41 10 0c [ 460.974737] sd 0:0:1:0: [sg0] tag#5602 CDB[10]: d2 c2 ee 18 ca 20 a1 1d 22 6a 65 10 48 46 5e b3 [ 460.983718] sd 0:0:1:0: [sg0] tag#5602 CDB[20]: a8 72 3d e6 3a 05 65 c9 ef d1 f3 ba b5 3e 96 b4 [ 460.992674] sd 0:0:1:0: [sg0] tag#5602 CDB[30]: 0a eb af 4e 68 77 20 2e 73 2e 3d ea e1 cc db ff [ 461.001643] sd 0:0:1:0: [sg0] tag#5602 CDB[40]: 89 9c ee 4a d8 28 af 3a d2 ba d9 31 26 68 13 cc [ 461.010604] sd 0:0:1:0: [sg0] tag#5602 CDB[50]: 7c e9 f3 af 16 a5 9c 12 c3 12 40 d6 51 8d f0 7f [ 461.019646] sd 0:0:1:0: [sg0] tag#5602 CDB[60]: 57 49 77 52 60 5f 90 fe 8d 27 9c 7a ba e0 65 5a [ 461.028605] sd 0:0:1:0: [sg0] tag#5602 CDB[70]: 37 95 97 d1 37 55 e1 7f cf 2a 5d 21 19 28 50 99 [ 461.037555] sd 0:0:1:0: [sg0] tag#5602 CDB[80]: 6c 6b 8d 9e e5 63 69 f8 6b 85 bf 6d ef 19 19 c5 [ 461.046509] sd 0:0:1:0: [sg0] tag#5602 CDB[90]: 8e 4d 62 01 11 97 d6 db 8e 7a 2b 57 51 ae 9d e5 [ 461.055468] sd 0:0:1:0: [sg0] tag#5602 CDB[a0]: b4 75 be 7c b1 d0 5e a0 da 9a c8 82 85 bd 9e fb [ 461.064487] sd 0:0:1:0: [sg0] tag#5602 CDB[b0]: e9 7c d1 23 64 f6 18 5c 71 01 32 91 b9 fb 23:29:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x9000000000000}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r3, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f000000d000)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000001000)=0xfffffffffffffdd7) bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @multicast1=0xe0000001}}, 0x1e) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0xf0c}, 0x1) 23:29:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x56, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [], "d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb96bca323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"}, 0xd5) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x400) 23:29:56 executing program 4: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc) 23:29:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) preadv(r1, &(0x7f0000001480)=[{&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/36, 0x24}, {&(0x7f00000012c0)=""/237, 0xed}, {&(0x7f00000013c0)=""/131, 0x83}, {&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000140)=""/107, 0x6b}], 0x7, 0x0) 23:29:56 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000824000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000e28000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0xbe, 0x80000001, @scatter={0x4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f0000000080)=""/77, 0x4d}, {&(0x7f0000000140)=""/73, 0x49}]}, &(0x7f0000000400)="ec852ba6e433851eb589074fd641100cd2c2ee18ca20a11d226a651048465eb3a8723de63a0565c9efd1f3bab53e96b40aebaf4e6877202e732e3deae1ccdbff899cee4ad828af3ad2bad931266813cc7ce9f3af16a59c12c31240d6518df07f57497752605f90fe8d279c7abae0655a379597d13755e17fcf2a5d21192850996c6b8d9ee56369f86b85bf6def1919c58e4d62011197d6db8e7a2b5751ae9de5b475be7cb1d05ea0da9ac88285bd9efbe97cd12364f6185c71013291b9fb", &(0x7f00000004c0)=""/162, 0x4, 0x10013, 0xffffffffffffffff, &(0x7f0000000580)}) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x38}}, 0x314) 23:29:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46560004000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000d59b35cb446d79d227f6017bd6dfc7df21a8004f36e56d011eb0ddcea504f8617f4c9c6b30c9ff20bd07147832869ee425d63442a7771611f5d711defb9601a323ca1c93055d7cd1e0e0b430063b7adaacddd6ef9ea1191dab4fed77a99b479b55714a7b2038e02a1264c285d0b542e2b00dc623d8db3e7b012894d7dc43309d083f6905acf18878cf618e495252a6a7077b8d55bc"], 0xd5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x101, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, r1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000300)=0x1) [ 461.329579] sd 0:0:1:0: [sg0] tag#5603 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 461.338593] sd 0:0:1:0: [sg0] tag#5603 CDB: opcode=0xec (vendor) [ 461.344917] sd 0:0:1:0: [sg0] tag#5603 CDB[00]: ec 85 2b a6 e4 33 85 1e b5 89 07 4f d6 41 10 0c [ 461.353990] sd 0:0:1:0: [sg0] tag#5603 CDB[10]: d2 c2 ee 18 ca 20 a1 1d 22 6a 65 10 48 46 5e b3 [ 461.363140] sd 0:0:1:0: [sg0] tag#5603 CDB[20]: a8 72 3d e6 3a 05 65 c9 ef d1 f3 ba b5 3e 96 b4 [ 461.372175] sd 0:0:1:0: [sg0] tag#5603 CDB[30]: 0a eb af 4e 68 77 20 2e 73 2e 3d ea e1 cc db ff [ 461.381188] sd 0:0:1:0: [sg0] tag#5603 CDB[40]: 89 9c ee 4a d8 28 af 3a d2 ba d9 31 26 68 13 cc [ 461.390149] sd 0:0:1:0: [sg0] tag#5603 CDB[50]: 7c e9 f3 af 16 a5 9c 12 c3 12 40 d6 51 8d f0 7f [ 461.399183] sd 0:0:1:0: [sg0] tag#5603 CDB[60]: 57 49 77 52 60 5f 90 fe 8d 27 9c 7a ba e0 65 5a [ 461.408155] sd 0:0:1:0: [sg0] tag#5603 CDB[70]: 37 95 97 d1 37 55 e1 7f cf 2a 5d 21 19 28 50 99 [ 461.417211] sd 0:0:1:0: [sg0] tag#5603 CDB[80]: 6c 6b 8d 9e e5 63 69 f8 6b 85 bf 6d ef 19 19 c5 23:29:56 executing program 1: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x8, 0x4) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 23:29:56 executing program 6: setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000c29ffc), 0x4) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r1, r0) mremap(&(0x7f0000dfe000/0x200000)=nil, 0x200000, 0x2000, 0x3, &(0x7f00004b4000/0x2000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 23:29:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1ff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x1000000000c, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xd, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x210200, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r1, 0x7cf2, 0x401, 0x8}, &(0x7f0000000080)=0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 461.426188] sd 0:0:1:0: [sg0] tag#5603 CDB[90]: 8e 4d 62 01 11 97 d6 db 8e 7a 2b 57 51 ae 9d e5 [ 461.435191] sd 0:0:1:0: [sg0] tag#5603 CDB[a0]: b4 75 be 7c b1 d0 5e a0 da 9a c8 82 85 bd 9e fb [ 461.444168] sd 0:0:1:0: [sg0] tag#5603 CDB[b0]: e9 7c d1 23 64 f6 18 5c 71 01 32 91 b9 fb [ 461.526508] ================================================================== [ 461.533942] BUG: KMSAN: uninit-value in update_cfs_rq_load_avg+0x1370/0x1aa0 [ 461.541127] CPU: 0 PID: 4566 Comm: syz-executor7 Not tainted 4.17.0+ #18 [ 461.547957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 461.557301] Call Trace: [ 461.559887] dump_stack+0x185/0x1d0 [ 461.563511] kmsan_report+0x188/0x2a0 [ 461.567334] __msan_warning_32+0x70/0xc0 [ 461.571405] update_cfs_rq_load_avg+0x1370/0x1aa0 [ 461.576245] ? console_trylock+0x200/0x200 [ 461.580493] update_load_avg+0xe50/0x2cc0 [ 461.584644] ? update_curr+0xc90/0x10a0 [ 461.588622] dequeue_task_fair+0x29d8/0x3300 [ 461.593024] ? timerqueue_add+0x4b9/0x4f0 [ 461.597173] ? nfqnl_recv_verdict+0x1c29/0x2330 [ 461.602102] ? nfqnl_recv_verdict+0x1c29/0x2330 [ 461.606758] ? enqueue_task_fair+0x4490/0x4490 [ 461.611325] deactivate_task+0x560/0x7d0 [ 461.615372] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 461.620734] __schedule+0x164/0x770 [ 461.624343] schedule+0x1cc/0x2f0 [ 461.627781] do_nanosleep+0x2c3/0x9c0 [ 461.631571] __se_sys_nanosleep+0x4b3/0x6a0 [ 461.635879] ? hrtimer_init_sleeper+0xc0/0xc0 [ 461.640364] __x64_sys_nanosleep+0x92/0xc0 [ 461.644585] ? hrtimer_nanosleep+0x560/0x560 [ 461.648982] do_syscall_64+0x15b/0x230 [ 461.652857] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 461.658027] RIP: 0033:0x4811c0 [ 461.661199] RSP: 002b:0000000000a3ea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 461.669857] RAX: ffffffffffffffda RBX: 0000000000070889 RCX: 00000000004811c0 [ 461.677107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3eaa0 [ 461.684357] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000e46940 [ 461.691609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.698870] R13: 0000000000000583 R14: 0000000000a3f160 R15: 000000000007086e [ 461.706125] [ 461.707736] Uninit was stored to memory at: [ 461.712043] kmsan_internal_chain_origin+0x12b/0x210 [ 461.717139] __msan_chain_origin+0x69/0xc0 [ 461.721367] enqueue_task_fair+0x15bf/0x4490 [ 461.725760] try_to_wake_up+0x162f/0x2260 [ 461.729904] wake_up_process+0x34/0x40 [ 461.733776] hrtimer_wakeup+0xac/0x100 [ 461.737645] __hrtimer_run_queues+0xc54/0x1630 [ 461.742228] hrtimer_interrupt+0x451/0x13c0 [ 461.746534] local_apic_timer_interrupt+0x6b/0x250 [ 461.751448] smp_apic_timer_interrupt+0x5a/0x90 [ 461.756093] [ 461.757697] Uninit was stored to memory at: [ 461.762019] kmsan_internal_chain_origin+0x12b/0x210 [ 461.767103] __msan_chain_origin+0x69/0xc0 [ 461.771320] reweight_entity+0x1610/0x1a30 [ 461.775538] enqueue_task_fair+0x40d7/0x4490 [ 461.779933] try_to_wake_up+0x162f/0x2260 [ 461.784069] wake_up_process+0x34/0x40 [ 461.787941] hrtimer_wakeup+0xac/0x100 [ 461.791812] __hrtimer_run_queues+0xc54/0x1630 [ 461.796380] hrtimer_interrupt+0x451/0x13c0 [ 461.800684] local_apic_timer_interrupt+0x6b/0x250 [ 461.805595] smp_apic_timer_interrupt+0x5a/0x90 [ 461.810240] [ 461.811843] Uninit was stored to memory at: [ 461.816148] kmsan_internal_chain_origin+0x12b/0x210 [ 461.821233] __msan_chain_origin+0x69/0xc0 [ 461.825462] reweight_entity+0x1456/0x1a30 [ 461.829681] enqueue_task_fair+0x40d7/0x4490 [ 461.834074] try_to_wake_up+0x162f/0x2260 [ 461.838205] wake_up_process+0x34/0x40 [ 461.842092] hrtimer_wakeup+0xac/0x100 [ 461.845965] __hrtimer_run_queues+0xc54/0x1630 [ 461.850528] hrtimer_interrupt+0x451/0x13c0 [ 461.854836] local_apic_timer_interrupt+0x6b/0x250 [ 461.859760] smp_apic_timer_interrupt+0x5a/0x90 [ 461.864402] [ 461.866010] Uninit was stored to memory at: [ 461.870330] kmsan_internal_chain_origin+0x12b/0x210 [ 461.875413] __msan_chain_origin+0x69/0xc0 [ 461.879632] enqueue_task_fair+0x15bf/0x4490 [ 461.884025] try_to_wake_up+0x162f/0x2260 [ 461.888168] wake_up_process+0x34/0x40 [ 461.892040] hrtimer_wakeup+0xac/0x100 [ 461.895911] __hrtimer_run_queues+0xc54/0x1630 [ 461.900480] hrtimer_interrupt+0x451/0x13c0 [ 461.904787] local_apic_timer_interrupt+0x6b/0x250 [ 461.909729] smp_apic_timer_interrupt+0x5a/0x90 [ 461.914376] [ 461.915981] Uninit was stored to memory at: [ 461.920296] kmsan_internal_chain_origin+0x12b/0x210 [ 461.925382] __msan_chain_origin+0x69/0xc0 [ 461.929598] reweight_entity+0x1610/0x1a30 [ 461.933813] task_tick_fair+0x5f8/0x1050 [ 461.937859] scheduler_tick+0x28d/0x490 [ 461.941824] update_process_times+0x157/0x1a0 [ 461.946302] tick_sched_timer+0x3ba/0x520 [ 461.950433] __hrtimer_run_queues+0xc54/0x1630 [ 461.954996] hrtimer_interrupt+0x451/0x13c0 [ 461.959307] local_apic_timer_interrupt+0x6b/0x250 [ 461.964233] smp_apic_timer_interrupt+0x5a/0x90 [ 461.968878] [ 461.970484] Uninit was stored to memory at: [ 461.974793] kmsan_internal_chain_origin+0x12b/0x210 [ 461.979877] __msan_chain_origin+0x69/0xc0 [ 461.984095] reweight_entity+0x128b/0x1a30 [ 461.988312] task_tick_fair+0x5f8/0x1050 [ 461.992367] scheduler_tick+0x28d/0x490 [ 461.996340] update_process_times+0x157/0x1a0 [ 462.000817] tick_sched_timer+0x3ba/0x520 [ 462.004960] __hrtimer_run_queues+0xc54/0x1630 [ 462.009525] hrtimer_interrupt+0x451/0x13c0 [ 462.013843] local_apic_timer_interrupt+0x6b/0x250 [ 462.018764] smp_apic_timer_interrupt+0x5a/0x90 [ 462.023412] [ 462.025030] Local variable description: ----flags.i.i.i.i@_raw_spin_lock_irqsave [ 462.032552] Variable was created at: [ 462.036251] _raw_spin_lock_irqsave+0x45/0xf0 [ 462.040734] hrtimer_interrupt+0x107/0x13c0 [ 462.045032] ================================================================== [ 462.054107] Disabling lock debugging due to kernel taint [ 462.059541] Kernel panic - not syncing: panic_on_warn set ... [ 462.059541] [ 462.066892] CPU: 0 PID: 4566 Comm: syz-executor7 Tainted: G B 4.17.0+ #18 [ 462.075812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.085149] Call Trace: [ 462.087728] dump_stack+0x185/0x1d0 [ 462.091352] panic+0x3d0/0x990 [ 462.094536] kmsan_report+0x29e/0x2a0 [ 462.098331] __msan_warning_32+0x70/0xc0 [ 462.102380] update_cfs_rq_load_avg+0x1370/0x1aa0 [ 462.107205] ? console_trylock+0x200/0x200 [ 462.111432] update_load_avg+0xe50/0x2cc0 [ 462.115569] ? update_curr+0xc90/0x10a0 [ 462.119537] dequeue_task_fair+0x29d8/0x3300 [ 462.123933] ? timerqueue_add+0x4b9/0x4f0 [ 462.128077] ? nfqnl_recv_verdict+0x1c29/0x2330 [ 462.132734] ? nfqnl_recv_verdict+0x1c29/0x2330 [ 462.137386] ? enqueue_task_fair+0x4490/0x4490 [ 462.141952] deactivate_task+0x560/0x7d0 [ 462.145997] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 462.151344] __schedule+0x164/0x770 [ 462.154952] schedule+0x1cc/0x2f0 [ 462.158406] do_nanosleep+0x2c3/0x9c0 [ 462.162197] __se_sys_nanosleep+0x4b3/0x6a0 [ 462.166505] ? hrtimer_init_sleeper+0xc0/0xc0 [ 462.170989] __x64_sys_nanosleep+0x92/0xc0 [ 462.175212] ? hrtimer_nanosleep+0x560/0x560 [ 462.179606] do_syscall_64+0x15b/0x230 [ 462.183482] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 462.188653] RIP: 0033:0x4811c0 [ 462.191828] RSP: 002b:0000000000a3ea98 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 462.199518] RAX: ffffffffffffffda RBX: 0000000000070889 RCX: 00000000004811c0 [ 462.206773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3eaa0 [ 462.214026] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000e46940 [ 462.221281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.228547] R13: 0000000000000583 R14: 0000000000a3f160 R15: 000000000007086e [ 463.445155] Shutting down cpus with NMI [ 463.449252] ------------[ cut here ]------------ [ 463.454038] kernel BUG at mm/kmsan/kmsan.c:1987! [ 463.458821] invalid opcode: 0000 [#1] SMP PTI [ 463.461596] Dumping ftrace buffer: [ 463.463328] Modules linked in: [ 463.466843] (ftrace buffer empty) [ 463.470055] Kernel Offset: disabled [[ 4 6436.34.4777376367]7] RRebeboootoitinngg iin n 886644000 0 sseecocnonddss... . z zer Tainted: G B 4.17.0+ #18 [ 463.489487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.498887] RIP: 0010:kmsan_nmi_enter+0x42/0x70 [ 463.503605] RSP: 0018:fffffe0000049ea8 EFLAGS: 00010046 [ 463.509022] RAX: 0000000080000000 RBX: 0000000000000001 RCX: 00000000c0000101 [ 463.516308] RDX: 00000000ffff8802 RSI: ffffffff8a00136c RDI: ffffea000cbec560 [ 463.523592] RBP: fffffe0000049ef9 R08: 0000000000000000 R09: 0000000000000000 [ 463.530884] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 463.538168] R13: 0000000000000000 R14: 0000000193e9a000 R15: 0000000000000000 [ 463.545464] FS: 000000c420028768(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 463.553717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.559611] CR2: 0000001b30d22000 CR3: 0000000193e9a000 CR4: 00000000001406e0 [ 463.566908] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.574193] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.581467] Call Trace: [ 463.584081] [ 463.586269] ? end_repeat_nmi+0x19/0x8e [ 463.590264] ? end_repeat_nmi+0x7/0x8e [ 463.594187] ? queued_spin_lock_slowpath+0x522/0xab0 [ 463.599315] ? queued_spin_lock_slowpath+0x522/0xab0 [ 463.604456] ? queued_spin_lock_slowpath+0x522/0xab0 [ 463.609559] [ 463.611829] ? _raw_spin_lock+0x79/0x80 [ 463.615825] ? try_to_wake_up+0x11b0/0x2260 [ 463.620198] ? wake_up_process+0x34/0x40 [ 463.624290] ? wake_up_q+0x5f/0xa0 [ 463.627852] ? futex_wake+0x955/0xba0 [ 463.631686] ? do_futex+0xaa8/0x6c20 [ 463.635434] ? pipe_poll+0x364/0x4c0 [ 463.639184] ? __msan_poison_alloca+0x15c/0x1d0 [ 463.643894] ? _raw_spin_lock_irqsave+0x45/0xf0 [ 463.648627] ? ep_scan_ready_list+0x3f1/0xf10 [ 463.653164] ? kmsan_set_origin_inline+0x6b/0x120 [ 463.658044] ? __msan_poison_alloca+0x15c/0x1d0 [ 463.662748] ? do_epoll_wait+0x10ad/0x1770 [ 463.667029] ? kmsan_set_origin_inline+0x6b/0x120 [ 463.671909] ? __msan_poison_alloca+0x15c/0x1d0 [ 463.676624] ? __x64_sys_futex+0x1a2/0x200 [ 463.680919] ? __se_sys_futex+0xe3/0x860 [ 463.685009] ? __x64_sys_futex+0x1a2/0x200 [ 463.689283] ? __se_sys_futex+0x65f/0x860 [ 463.693483] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 463.698982] ? prepare_exit_to_usermode+0x149/0x3a0 [ 463.704047] ? syscall_return_slowpath+0x86/0x710 [ 463.708940] ? __x64_sys_futex+0x1a2/0x200 [ 463.713203] ? futex_lock_pi+0x1e50/0x1e50 [ 463.717471] ? do_syscall_64+0x15b/0x230 [ 463.721572] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 463.726955] Code: 10 00 74 27 65 8b 04 25 c0 90 03 00 83 c0 01 83 f8 09 7d 27 65 89 04 25 c0 90 03 00 65 c6 04 25 55 6e 0b 00 ff c3 0f 0b 90 eb fe <0f> 0b 66 90 66 2e 0f 1f 84 00 00 00 00 00 eb fe 0f 0b 66 90 66 [ 463.746611] RIP: kmsan_nmi_enter+0x42/0x70 RSP: fffffe0000049ea8 [ 463.752786] ---[ end trace bbc8269e1213346b ]---