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"/452], 0x0) 23:30:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, 0x0, 0x0) 23:30:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:29 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$dsp(r4, &(0x7f0000000000)=""/201, 0xc9) 23:30:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100), 0x0) [ 972.891100][ T5880] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 972.891100][ T5880] program syz-executor.5 not setting count and/or reply_len properly 23:30:29 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 973.088918][ T5768] IPVS: ftp: loaded support on port[0] = 21 23:30:30 executing program 3: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100), 0x0) 23:30:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={r8}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x6, 0x8000, 0x7, 0x7, 0x58, 0xfffffffc, 0x80, r8}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:30 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff0200000000000000000000000000010000007a650000000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:30 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x440000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000240)={0xe, 0x6, 0x7ff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth0_vlan\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000002c0)={r3}) [ 974.032686][T13234] tipc: TX() has been purged, node left! [ 974.113306][ T6002] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 974.113306][ T6002] program syz-executor.5 not setting count and/or reply_len properly [ 974.116552][ T6005] net_ratelimit: 13 callbacks suppressed [ 974.116562][ T6005] dccp_invalid_packet: P.Data Offset(101) too large [ 974.145959][ T6027] dccp_v6_rcv: dropped packet with invalid checksum 23:30:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100), 0x0) 23:30:30 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000000c0)={0x6, 'hsr0\x00', {0x7fff}, 0x922}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) dup(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000080)=0x7fff, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x0) 23:30:30 executing program 3: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 23:30:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) prctl$PR_SVE_GET_VL(0x33, 0x14d3) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) [ 974.264507][ T6005] dccp_invalid_packet: P.Data Offset(101) too large 23:30:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:30 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:30 executing program 3 (fault-call:7 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:30:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) 23:30:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fcntl$getown(r2, 0x9) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 974.529688][ T6171] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 974.529688][ T6171] program syz-executor.5 not setting count and/or reply_len properly [ 974.626599][ T6232] dccp_v6_rcv: dropped packet with invalid checksum [ 974.689512][ T6232] dccp_v6_rcv: dropped packet with invalid checksum 23:30:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x9) 23:30:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) r3 = eventfd2(0x7ff, 0x100001) r4 = semget(0x1, 0x4, 0xa0) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000340)=""/28) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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") 23:30:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:30:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) 23:30:31 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x23) [ 975.060951][ T6258] dccp_v6_rcv: dropped packet with invalid checksum 23:30:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x29) 23:30:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x24) [ 975.129202][ T6258] dccp_v6_rcv: dropped packet with invalid checksum 23:30:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:31 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0xc4) 23:30:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x16, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:30:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf8779", 0x36) [ 975.457950][ T6276] dccp_v6_rcv: dropped packet with invalid checksum [ 975.509845][ T6279] sg_write: data in/out 167162/148 bytes for SCSI command 0xff-- guessing data in; [ 975.509845][ T6279] program syz-executor.5 not setting count and/or reply_len properly [ 975.518315][ T6276] dccp_v6_rcv: dropped packet with invalid checksum 23:30:31 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x259a, &(0x7f00000002c0)=0x0) close(r2) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000007f, 0x80421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xccaf, 0x8000}, 0x108a0}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r10 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/l2cap\x00') r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000000240)={r16}, 0x8) r17 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r17, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000008c0)={0xfffffff, 0x5, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x9d0902, 0x800, [], @ptr=0xad}}) [ 975.614143][ T6284] sg_write: data in/out 167162/6 bytes for SCSI command 0xff-- guessing data in; [ 975.614143][ T6284] program syz-executor.0 not setting count and/or reply_len properly 23:30:32 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x20000148) 23:30:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa02, {0x0, r3, r2}}, 0x18) 23:30:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf8779", 0x36) [ 975.837661][ T6300] dccp_invalid_packet: P.Data Offset(99) too large [ 975.918743][ T6305] sg_write: data in/out 167162/6 bytes for SCSI command 0xff-- guessing data in; [ 975.918743][ T6305] program syz-executor.0 not setting count and/or reply_len properly 23:30:32 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 975.999755][ T6306] sg_write: data in/out 167162/536871192 bytes for SCSI command 0xff-- guessing data in; [ 975.999755][ T6306] program syz-executor.5 not setting count and/or reply_len properly 23:30:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000)=0x9, 0x4) 23:30:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf8779", 0x36) 23:30:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x7) 23:30:32 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 976.275976][ T6322] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 976.275976][ T6322] program syz-executor.5 not setting count and/or reply_len properly [ 976.342350][ T6325] sg_write: data in/out 167162/6 bytes for SCSI command 0xff-- guessing data in; [ 976.342350][ T6325] program syz-executor.0 not setting count and/or reply_len properly 23:30:32 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/445], 0x0) 23:30:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x17, 0x1a, 0x8, 0x3c, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0xcc8, {0x6, 0x33, 0x7, 0x4, 0x0, 0xdbc, 0x0, @in6=@empty, @in=@rand_addr=0x10f}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_sec_ctx={0x1c, 0x18, 0x3f, 0x6, 0xd7, "b58d4575f940d7218ce0500793be94cb22341a43b001246989f2f6b1b706978a6d556442b7e6994e7a084a4b9b70ae4674be0d743cf3466cc9c75c6263fb53fb0931e1e64c698aaad0c61a3103db54863c1c5d737ecd07019dbaaf1018ff7c89c38b65d5ec92c600884ceb813f4d743dc46d9045c938aa8ff33e957a512d724cf73e19a91e9a91ae7e046bbb60c27498aaaf06309f58acd54dcbd6351d13d71117f50d1d00750c81fca1711fe9ee4108725f759045574386a33da8253b0d604db4c7e8e67dca6842455cec0a86b5c5f88bdfd683801030"}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in=@local, 0xf, 0x4, 0x14}, @sadb_ident={0x2, 0xa, 0x7ff, 0x0, 0x1}, @sadb_x_sec_ctx={0xa, 0x18, 0x2, 0x40, 0x48, "47caf9aa6eae13f6505fe54cd515605015e9b0570c197bba56f4a2041b7288bef13f1d5df9a0c441a7ff12daf245d3b3555caf9b5fc99e4694226ae7b2c1c7da8111eab544e4f946"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}]}, 0x1e0}}, 0x20000005) 23:30:32 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdf", 0x3f) [ 976.576136][ T6342] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 976.576136][ T6342] program syz-executor.5 not setting count and/or reply_len properly 23:30:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x20000098) [ 976.729084][ T6352] sg_write: data in/out 167162/15 bytes for SCSI command 0xff-- guessing data in; [ 976.729084][ T6352] program syz-executor.0 not setting count and/or reply_len properly 23:30:33 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdf", 0x3f) 23:30:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYPTR64, @ANYRESHEX=0x0], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) r7 = socket(0x2b, 0x3, 0xb) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r11 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x2, 0x8000) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r11, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x10, 0x70bd2a, 0x25dfdbff}, 0x1c}}, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) r15 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) setuid(r16) r17 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r17, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r17, 0x0, 0x10, &(0x7f0000001cc0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000001dc0)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000002280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002240)={&(0x7f0000001e00)=@updsa={0x404, 0x1a, 0x8, 0x70bd27, 0x25dfdbfd, {{@in=@empty, @in=@broadcast, 0x4e22, 0x2, 0x4e22, 0x8, 0xa, 0x80, 0x20, 0x2f, r9, r10}, {@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d4, 0x32}, @in6=@empty, {0x8, 0x0, 0x5, 0xffffffff, 0x7, 0xffff, 0x80000001, 0x3ff}, {0x20, 0x8, 0x100000001, 0x5}, {0x0, 0x3, 0xfffffff7}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x44}, [@sa={0xe4, 0x6, {{@in=@remote, @in6=@mcast1, 0x4e20, 0x0, 0x4e22, 0x288, 0x2, 0x80, 0xa0, 0x37, r13, r14}, {@in6=@dev={0xfe, 0x80, [], 0x24}, 0x4d2, 0x33}, @in=@empty, {0x8, 0x2, 0x33c, 0x7, 0x5, 0x4, 0xb83, 0x7}, {0x54, 0x0, 0x2, 0x4}, {0x200, 0x9fc, 0x2}, 0x70bd27, 0x3500, 0x2, 0x4, 0x5e, 0x83}}, @sa={0xe4, 0x6, {{@in=@broadcast, @in=@multicast1, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0x180, 0x0, 0x32, 0x0, r16}, {@in6=@empty, 0x4d2, 0x2b}, @in=@local, {0x7, 0x2, 0x1, 0x2, 0x1, 0x3, 0xbb, 0x20}, {0x3, 0x1ff, 0xfff, 0x2}, {0x1aa3, 0x4, 0x1}, 0x70bd2a, 0x3501, 0x2, 0x2, 0x2, 0x54}}, @algo_comp={0x11e, 0x3, {{'lzs\x00'}, 0x6b0, "6b8cb3baa416addde323bbf5d9d6d94086cb77a2ac3ef508bf05dd3bc073371f0a06d134ee08981c900b67a5f0d7f449e0cc046fe12ddddb6c8dc09e01373e52959f49943e1537fb96990875fe02c2bcbc54eef6fd046ed7c5ffc864b2a1df63579276c676f08a773a21ea7fd46cf6f5104ee13af4cb186cb48e1f6ec7bc9e6a0b77b284a9c50eae68dc8b976a5c10a56ca2f925193b797119f3c5adb543ad58bba52f3df3df158d69d5d5eca8f7bd79e9604276ff827883811da1e76c890a738476388b1efcff16de25e2551e761ad72c38fcebc4ba"}}, @coaddr={0x14, 0xe, @in=@loopback}, @offload={0xc, 0x1c, {r18, 0x1}}, @policy_type={0xa, 0x10, {0x1}}]}, 0x404}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 23:30:33 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000400000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendto$inet(r8, &(0x7f0000000080)="6668cac75daaa416cd45d679f7c3ba4127ed9c40bd933dbba12a4bc0699530904c158342b3aaadd47c9dcf596aabeca290fb82b9774cc21d218659671a6bfe203165e31567445832368c55177350", 0x4e, 0x90, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000240)={r12}, 0x8) fcntl$dupfd(r9, 0x0, r10) r13 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x96efb8f) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdf", 0x3f) 23:30:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:30:33 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:33 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) write$cgroup_pid(r2, &(0x7f0000000240)=r3, 0x12) 23:30:33 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7", 0x44) 23:30:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000000)={r7, 0x8001}, &(0x7f0000000140)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0xa, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x25}}, {0xa, 0x3, 0x0, @mcast1}, r3, 0x1}}, 0x48) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$binfmt_script(r8, &(0x7f00000005c0)={'#! ', './file0', [{0x20, '/dev/video37\x00'}, {0x20, '+'}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, '/dev/video37\x00'}, {0x20, '/dev/video37\x00'}, {0x20, 'nodev'}], 0xa, "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"}, 0x1056) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:30:34 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) inotify_init() r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:34 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:34 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000020ffc)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000022000)=0x1, 0x4) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000001c0)=0x1, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000000c0)=""/215, 0x1000, 0x1000, 0x1d8, 0x3}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1, 0xfffffffe}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x4, @mcast2, 0x1}}, 0x7f, 0x9, 0xfffffffe, 0xbd1, 0x2}, &(0x7f0000000280)=0x98) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 23:30:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7", 0x44) 23:30:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7", 0x44) 23:30:34 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650200000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:34 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x4) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000000080)=""/56) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) syz_emit_ethernet(0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaab3aaaaaaaaaaaa0086dd60ee376a01840400fe8000000100000000000000000000bbff02000000000000100000000000000100000000650000000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7d12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f325259a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16e000000800000000010255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd6000000000000000000000000000000ea5c35ab0dcdbea62205b9ef9fe698a63522fddfa2ca321ff77756f7468b7dbdb6d6ff344052bf6e7879985ae6b678d838497a9e2bc8f6912959ead89efeede04e0ce2b422d6e7f1d57a75a34023c01069fe7627b681cd4ecc2e477c3cde80b1f9bc39f2c6628ba08f37143687f77cba38ddc27a5e97e1db4c1699eceaa66bbb16d9d85eabdc21f7ae4de1c0094ccbac1ae45b47b5f61ae948a8d5075bfe03763f0b4d9a8870e5c21eb789eacd5eecae452858debcefefae49bee59f9a5114f0e2a828c41571e234e5a97676d3ef88120f814a575ae2194bdfba997ff56fca2148661f869dc5a7a6021ebd630e1ff8e88983e94a2f4837af380f65cb599de7ded6593ab1da995112675f4cb34ff4a5c3ac13b138b69a3fcd96ce2bc11a3f1ecb0372e9a08ba69eb3ae94144f487fd96e9bcb7e9e07e9fffa28237745d6cf30913376bb18482371fc9833246b0fe4d5735408a2f5b1912c7a58595d0058716ef6d1ca4ab7c4fa5db7a3b5f572c347bc2179c15b14ede82f609b4c1242ad6b271353d0a2ecec9a3513c2132e23c502a86c005acc81251c5a11f71ef5956c99a3f0905b9b77019ff38eec6a3852d080a096e682d403003e071589b20c631c957431dc14d1994cce3c2a24a5954d870c66e61825eefffaca26b834dbfd51f17426174b232b47708d8d0893ec70ddb8ce8d20797a497c5ec06a1b37a0b9ba6e7d8824260ef0e2777998d46b3ee83fb9b6bbca197d066ab7496b9fb7b7b836643b656ba367ba939e7bea304a67de33fe208bbc9ff7ba628ffac4dc5f1898d570c6a1b4f5f5100a0000000000000000", @ANYRESOCT=r2, @ANYRESHEX], 0x0) 23:30:34 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200343, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000001540)=ANY=[@ANYBLOB="04010000", @ANYRES16=r2, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x5632bd2769f526ff}, 0x1) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r3, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:34 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650300000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r7, r6}}, 0x18) 23:30:34 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb", 0x46) 23:30:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000080)="b63db85e1e8d020000000000003ef0011dcc606aed69ffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x3f) 23:30:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb", 0x46) 23:30:35 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$isdn(0x22, 0x3, 0x2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffe) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x0) 23:30:35 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650400000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8, 0x7, 0x9, 0x9, 0x11, "5598224600b84048028d080518d8773a6e4659"}) 23:30:35 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01840400fe8000000100000000000000000000bbff020000000000000000000000000001000000000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb005000000000000003ae414e22e3badd58bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:35 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0xfff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="7000000008006900ec0a641b4e611a5000"/32, @ANYRES32=r5, @ANYBLOB="b157facd75cf45364d62888f0307695e78387948416ccfd62c858021704c46c01b183f9be6fbf07581b0e601f6fc77944f6dd0e5c0df53968094316f86cafd794499c1919266e162af177a36220333eff16c6c00"], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008c0) r6 = fcntl$dupfd(r1, 0x0, r1) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb", 0x46) 23:30:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x5, 0xff, 0x81, 0x5, 0x0, 0xfffffffffffffffc, 0x20, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2000, 0x0, 0x5, 0x0, 0x2, 0x8, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x1ff, 0x0, 0x20, 0x4, 0x4}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20000004001fd) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8) [ 979.293070][ T6686] net_ratelimit: 23 callbacks suppressed [ 979.293080][ T6686] dccp_invalid_packet: P.Data Offset(101) too large [ 979.385181][ T6686] dccp_invalid_packet: P.Data Offset(101) too large [ 979.389250][ T6696] sg_write: 8 callbacks suppressed [ 979.389265][ T6696] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 979.389265][ T6696] program syz-executor.5 not setting count and/or reply_len properly 23:30:35 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 979.582186][ T6803] dccp_invalid_packet: P.Data Offset(101) too large [ 979.594074][ T6803] dccp_invalid_packet: P.Data Offset(101) too large 23:30:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a", 0x47) 23:30:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10401, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000080)={0xd, 0x7}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x19d2151d) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x81, 0x40, 0x3, 0x6, 0x1, 0x24, 0x59, 0x4, 0x7f, 0xc5, 0x6f}, 0xe) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000)=0x300915, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 23:30:36 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 979.893963][ T6813] sg_write: data in/out 167162/23 bytes for SCSI command 0xff-- guessing data in; [ 979.893963][ T6813] program syz-executor.0 not setting count and/or reply_len properly [ 979.942946][ T6815] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 979.942946][ T6815] program syz-executor.5 not setting count and/or reply_len properly [ 980.021552][ T6825] dccp_invalid_packet: P.Data Offset(101) too large 23:30:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) eventfd(0x7) [ 980.063857][ T6825] dccp_invalid_packet: P.Data Offset(101) too large [ 980.113127][ T6829] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 980.113127][ T6829] program syz-executor.5 not setting count and/or reply_len properly 23:30:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a", 0x47) 23:30:36 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x4}, 0xfffffffffffffda7) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r1}}, 0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') socket$inet(0x2, 0x80001, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000340)=@assoc_value, &(0x7f0000000040)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000240)={r10}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000240)={r13}, 0x8) r14 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) r16 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r16, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000000240)={r17}, 0x8) r18 = socket$inet6_sctp(0xa, 0x5, 0x84) r19 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r19, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r18, 0x84, 0x11, &(0x7f0000000240)={r20}, 0x8) r21 = socket$inet6_sctp(0xa, 0x5, 0x84) r22 = socket$inet(0x2, 0x3, 0x11) getsockopt$inet_sctp_SCTP_MAX_BURST(r22, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r21, 0x84, 0x11, &(0x7f0000000240)={r23}, 0x8) r24 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r24, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r25 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r25, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r26 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r26, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r26, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[]}, 0x1, 0x0, 0x0, 0x5686365db56c42c7}, 0x20044010) [ 980.293065][ T6834] sg_write: data in/out 167162/23 bytes for SCSI command 0xff-- guessing data in; [ 980.293065][ T6834] program syz-executor.0 not setting count and/or reply_len properly 23:30:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xef3ba4076b75166a, 0x10, r4, 0x100) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a", 0x47) [ 980.403181][ T6841] dccp_invalid_packet: P.Data Offset(101) too large [ 980.431991][ T6841] dccp_invalid_packet: P.Data Offset(101) too large 23:30:36 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2}, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000002dbf89329f3e2674910fcc000000002000dce9c8801e482423fdc3596e0000dd66cf1000028006"], 0x40}}, 0x0) r7 = socket(0xa, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="540000000ce69ada3bb53cdb02d08191388789efa44fbc0a7842e6c3b156911b2e3411361c6345136010fdadccef5f691825e5195a9fa58aa0907dc28d300579d5e4038fe98149cd0e950ac3350a2843b6a27f630fd5d73217df15b02f86ed4380ce14fc41c51a0811a8b70cff31b0cef6ab7f013e691988dddd64a68d0960092f38", @ANYRES16=r10, @ANYBLOB="00122abd7000ffdbdf250100000008000200020000000800010001000000080001000000000008000100010000000800020002000000080001000000000008000100000000000800010000000000"], 0x54}, 0x1, 0x0, 0x0, 0x28000000}, 0x48020) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r10, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000040}, 0x7cfd90ca6ea34f3d) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r10, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20008000) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:36 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 980.543527][ T6853] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 980.543527][ T6853] program syz-executor.5 not setting count and/or reply_len properly [ 980.619146][ T6878] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. 23:30:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) [ 980.679500][ T6918] dccp_invalid_packet: P.Data Offset(101) too large 23:30:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000000)={0x2, 0x20}) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 980.737359][ T6918] dccp_invalid_packet: P.Data Offset(101) too large 23:30:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair(0xa, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000000280)=[{{&(0x7f00000000c0)=@caif=@rfm={0x25, 0x10001, "7e81633390658859e46bf320827c365a"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="3c51a815ba80ebc497cebfca5e607431f0770a7f828f45ec12ab31cc69e5d679c9ac49ecb683d9d0e4c87ffd0d496bf05fea19d1ecd822d1410f639c795c0eeda0f5947a1e82b78cd9e81d5d63160af30d53f9d76092e4b8f8ad", 0x5a}, {&(0x7f0000000340)="72178c00be92e42acba4f8f2119daf1b914369c5e0c96b09319f6ee542345b5edd25b1e2e6e2559cc91f1a2fb007a86ebc31778d75a14a947969523a92fb9215d7eaa955bae73e62", 0x48}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000003c0)="5ce3644de6f41b9a23a5afaa8b242e12b8dbbc1adfcbebd6fb065009739285789b0251681fda19f9331c9ec7d94f8d3dccc69407fcd3a3399ca07dcfb23b9678d939af8362459d7555ddce709bf5b333ea5c3ba204fb43831ffa3319e1647fdfe0b5c54c63f86a46418abb61ab134da5879ec390d0fbebcdd084fbfa6a7532959bfb82cd7ad274f00e06025b42d8610a503a834ba580092d62c284d88328189ff81572984eab2575fa4d", 0xaa}], 0x4, &(0x7f00000015c0)=[{0xe8, 0x88, 0x800, "40d6b4274df9165dc92dda6700d1e1353192c012ba180de3d3d5d6c64dea894886e9e6985e78f9b1c0b8f21d1e17be76518711805d397159dcc0a71c332951d017c279389ba3d99a98f2e499420959262500780d3802c6826dff9e88c41117e0ae147271a51ca6a0905e20018e65f12afe30ce021d2bf2e4ec3cf3e5420a491271c60fc46ac29d69c67937add04a16e11be4a2c459f9a9be15389e95158647459deb49509a043072c0a1ece1dc92cb82a951665a73dc31d91d6814ca22cada5bd6a120e8f8a33b0b63e1c0c716045468c3a6f77f"}, {0xe8, 0x108, 0x0, "18c56a389ec7b053b800dbb856712baea4f46878e8278afa23dd4486271395ed5aa744d0ca76c53cd6522e28c4e6cd1a75536f5d5b3b7756f67a6b3744ddda4ca1879bf58e609e5d5c214cb23f773c9099916dfd69d9de1d4a7a19733fe0cda3909fbcbd9392e5b081136bc7c293b5ea16bdd3ea2d977de86afc7f64c65290199356e35d9df2a8298ebfb3e50f722d975a9a5d0c9d664285baf49cc5c6914ce026d22e4daf4c5828bf605c234553a29578d4c506a2cef5fd64b18f213e63201e6dc7849c237cb804558c23621f92b1b0a9ecf5"}], 0x1d0}}], 0x1, 0xc0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) r12 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r12, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r12, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="08c49df4756500"], 0x5) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r9, 0x0, r11, 0x0, 0x10005, 0x0) r13 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$TIOCSBRK(r13, 0x5427) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r14}}, 0x48) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r15, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r14, r7}}, 0x18) 23:30:37 executing program 0: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:37 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x4, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) socket$tipc(0x1e, 0x2, 0x0) [ 980.957724][ T7067] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 980.957724][ T7067] program syz-executor.5 not setting count and/or reply_len properly 23:30:37 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000200)={'syz_tun\x00', {0x2, 0x4e20, @empty}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x259a, &(0x7f00000002c0)=0x0) close(r2) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000007f, 0x80421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xccaf, 0x8000}, 0x108a0}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r10 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/l2cap\x00') r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000000240)={r16}, 0x8) r17 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r17, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000008c0)={0xfffffff, 0x5, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x9d0902, 0x800, [], @ptr=0xad}}) 23:30:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x18000) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000080)) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x713e, 0x208001) fsync(r3) r4 = fcntl$dupfd(r1, 0x0, r1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r5, 0xa02000000000000, 0x60, &(0x7f00000002c0)={'filter\x00', 0x4, 0x2, 0x3a0, 0x0, 0x0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'lo\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@multicast1, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x3f0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:37 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:37 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 981.299801][ T7167] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 981.299801][ T7167] program syz-executor.5 not setting count and/or reply_len properly 23:30:37 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:37 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x259a, &(0x7f00000002c0)=0x0) close(r2) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000007f, 0x80421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xccaf, 0x8000}, 0x108a0}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r10 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/l2cap\x00') r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000000240)={r16}, 0x8) r17 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r17, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000008c0)={0xfffffff, 0x5, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x9d0902, 0x800, [], @ptr=0xad}}) 23:30:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:38 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x412801, 0x0) read$eventfd(r2, &(0x7f0000000240), 0x8) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x50d000, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000240)={r9}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000040)={r9, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={r10, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:38 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:38 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 982.068134][ T7423] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 982.068134][ T7423] program syz-executor.5 not setting count and/or reply_len properly 23:30:38 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xc00, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000240)={r10}, 0x8) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000240)={r14}, 0x8) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0x9b0000, 0x1, 0x400, r12, 0x0, &(0x7f0000000100)={0x9b0909, 0x3, [], @p_u16=&(0x7f00000000c0)=0xfe01}}) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = openat$cgroup_subtree(r16, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) r18 = dup(r17) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) r19 = socket$inet6_sctp(0xa, 0x5, 0x84) r20 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r20, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r19, 0x84, 0x11, &(0x7f0000000240)={r21}, 0x8) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r19], 0x0) 23:30:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) accept(r2, &(0x7f0000000080)=@caif=@dgm, &(0x7f0000000100)=0x80) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x11) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0xe) 23:30:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) r5 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001ff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f00000000c0)={'macvlan1\x00', 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r8}}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_GET_PIT2(r10, 0x8070ae9f, &(0x7f00000001c0)) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r4, 0x87d7}, &(0x7f00000002c0)=0xc) bind$alg(r5, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) 23:30:38 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x259a, &(0x7f00000002c0)=0x0) close(r2) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000000007f, 0x80421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xccaf, 0x8000}, 0x108a0}, 0x0, 0xffffffffffffffff, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r10 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/l2cap\x00') r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000000240)={r16}, 0x8) r17 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r17, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000008c0)={0xfffffff, 0x5, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x9d0902, 0x800, [], @ptr=0xad}}) 23:30:38 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x10, 0x20, 0x1}, 0x10) r2 = accept$alg(r1, 0x0, 0x0) write(r2, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0012ecc606aed69d2bc7037cebc9bc2feffffff1fae1acf02de7a91a3cbdfa009cf75a7eadb2a00000000000000009088e048176cb4fba0828512e0ae7f99103f047791204b8def12", 0x57) 23:30:38 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650003000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01840400fe8000000100000000000000000000bbff02000000080000000000000000000100000000650000000800000000000000002a00000000000005020000050200491aeee529ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e170013cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef62413b5ae4f36552bc7bea13fb770dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d8071d9061789e0c5e52407ec2f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd6000000000000000000003b6d29b370882c7be347f2d8a0b94c513749d7946009b03b42b177eda1eae9e378d49be101e392d1cdea64eed2880eb46668fe2990ce7ba3060777ac9155a45553b1f43a9e25a582b5fb7332cd1393aaa89033dceb85e9ccd0f498dacc4ff5433a8d448b609fe2d3cc2cc0349b78e6dc45e7dd87f009431351e2e20030a69bb5f09c8479fc70f13f4d95799aba36559cbc8ab85b2c7f889b3c8bd281311e0053d851e45846e76ebe1abd1dfc8996d10e32867af4df45082e9aab5cfaab3aff5dd34c57afc762ed8d1d286aae38704cd858b5d8d510fef63bad118fc1b783171bde984df621270f31c6ed1315b4760d47a2572d79501d0321ca2270fc58ab946e267218a0510b3d0ba9c1121b50194a36cfbc56ca8a2cc372adee93bc3730fe5dab5c2df1b6cd5580f47cfe0e0da1e2f5c4cb90dbe39d8df83bd47036849f5f743f6d7e5fa5b7d99983eabfdde8a1bbbd5d5746e4432db9790436e8a8a8a71b2079f907"], 0x0) 23:30:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x426000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x7bf5bd08}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180)={r4, 0x3643cd9f}, 0x8) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:39 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 982.980638][ T7872] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 982.980638][ T7872] program syz-executor.5 not setting count and/or reply_len properly 23:30:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x4000) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01840400fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862072160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:39 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650006000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:39 executing program 4 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) 23:30:39 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:30:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x8000000) [ 983.428371][ T8085] FAULT_INJECTION: forcing a failure. [ 983.428371][ T8085] name failslab, interval 1, probability 0, space 0, times 0 [ 983.482865][ T8085] CPU: 0 PID: 8085 Comm: syz-executor.4 Not tainted 5.5.0-rc7-syzkaller #0 [ 983.492294][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.503223][ T8085] Call Trace: [ 983.506583][ T8085] dump_stack+0x197/0x210 [ 983.511129][ T8085] should_fail.cold+0xa/0x15 [ 983.516060][ T8085] ? fault_create_debugfs_attr+0x180/0x180 [ 983.522287][ T8085] ? __mutex_lock+0x458/0x13c0 [ 983.527258][ T8085] __should_failslab+0x121/0x190 [ 983.532237][ T8085] should_failslab+0x9/0x14 [ 983.536980][ T8085] __kmalloc+0x71/0x770 [ 983.541587][ T8085] ? free_object+0x70/0x70 [ 983.546036][ T8085] ? sg_build_indirect.isra.0+0x11f/0xa10 [ 983.552390][ T8085] sg_build_indirect.isra.0+0x11f/0xa10 [ 983.558490][ T8085] ? debug_object_init+0x16/0x20 [ 983.563485][ T8085] sg_common_write.isra.0+0xa89/0x2470 [ 983.569308][ T8085] ? sg_open+0x19a0/0x19a0 [ 983.574091][ T8085] ? lock_downgrade+0x920/0x920 [ 983.582675][ T8085] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 983.588718][ T8085] ? ___ratelimit+0x2c8/0x595 [ 983.593431][ T8085] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 983.599845][ T8085] ? lockdep_hardirqs_on+0x421/0x5e0 [ 983.605558][ T8085] ? trace_hardirqs_on+0x67/0x240 [ 983.611112][ T8085] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 983.617137][ T8085] ? ___ratelimit+0x60/0x595 [ 983.622064][ T8085] ? _copy_from_user+0x12c/0x1a0 [ 983.627196][ T8085] sg_write.part.0+0x7f7/0xe80 [ 983.631996][ T8085] ? sg_ioctl+0x28a0/0x28a0 [ 983.636676][ T8085] ? __lockdep_free_key_range+0x120/0x120 [ 983.642729][ T8085] ? perf_trace_lock+0xeb/0x4c0 [ 983.648111][ T8085] ? __fget+0x35d/0x550 [ 983.652855][ T8085] ? find_held_lock+0x35/0x130 [ 983.657860][ T8085] ? __fget+0x35d/0x550 [ 983.662262][ T8085] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 983.668517][ T8085] ? common_file_perm+0x2f3/0x940 [ 983.673758][ T8085] ? rcu_read_lock_held+0x9c/0xb0 23:30:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000180)={0xe, {0x4, 0x1, 0x3f, 0x2e, "011f749ef0ef178b42102038b4502988406c36c29eb92ad7d044b028d884033df4c9e60fa95a6375c6b1ed48e33c"}}, 0x3a) socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={r8}, 0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000280)={r8, 0x4}, 0x8) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000240)={r12}, 0x8) accept(r9, &(0x7f0000000080)=@phonet, &(0x7f0000000240)=0xc2) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x1}}, 0x10) 23:30:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) [ 983.679078][ T8085] ? apparmor_path_rmdir+0x30/0x30 [ 983.684445][ T8085] ? __fget+0x37f/0x550 [ 983.688643][ T8085] sg_write+0x6e/0x93 [ 983.692664][ T8085] __vfs_write+0x8a/0x110 [ 983.697333][ T8085] ? sg_write.part.0+0xe80/0xe80 [ 983.702394][ T8085] vfs_write+0x268/0x5d0 [ 983.706857][ T8085] ksys_write+0x14f/0x290 [ 983.711509][ T8085] ? __ia32_sys_read+0xb0/0xb0 [ 983.716699][ T8085] ? do_syscall_64+0x26/0x790 [ 983.721774][ T8085] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.729274][ T8085] ? do_syscall_64+0x26/0x790 23:30:40 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2}, 0x8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x3f, 0xb, 0x4, 0x800, 0x6, {0x0, 0x2710}, {0x1, 0x1, 0xc0, 0x40, 0x5, 0x5, "8ab157f9"}, 0xff, 0x1, @planes=&(0x7f0000000000)={0x7, 0x1f, @mem_offset=0x88, 0x7}, 0x6, 0x0, r0}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r3, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r5 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7, 0x10002) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @aes128, 0x3, "dcedfe29612d0848"}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write(r4, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0xf740a000) [ 983.733993][ T8085] __x64_sys_write+0x73/0xb0 [ 983.738841][ T8085] do_syscall_64+0xfa/0x790 [ 983.743542][ T8085] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.749939][ T8085] RIP: 0033:0x45b349 [ 983.753880][ T8085] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.774881][ T8085] RSP: 002b:00007fc4d0ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 23:30:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x7ffffffff000) 23:30:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140)=[@window={0x3, 0x8, 0x5}], 0x1) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4400, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x8000, 0x78b7, 0xb, 0x1, 0x10000, 0x1fffe0, 0x1ff, 0x4, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={r4, @in={{0x2, 0x4e21, @loopback}}, 0x2, 0x100}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000300)={0x4, 0x5, 0x4, 0x1, 0x2, {0x77359400}, {0x3, 0x2, 0x2, 0x30, 0x5, 0x25, "51efbd54"}, 0x40, 0x0, @userptr=0x40, 0x2, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xfffffffffffffe1c) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_hsr\x00', {0x5}, 0x72}) 23:30:40 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 983.783324][ T8085] RAX: ffffffffffffffda RBX: 00007fc4d0ccc6d4 RCX: 000000000045b349 [ 983.791497][ T8085] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000003 [ 983.800562][ T8085] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 983.809214][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 983.817212][ T8085] R13: 0000000000000c09 R14: 00000000004c8b2b R15: 0000000000000000 23:30:40 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff0200000000000000000000000000010000000065fa08000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000000)={0x1, 0x7}) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r3 = semget(0x3, 0x1, 0x0) semctl$GETVAL(r3, 0x0, 0xc, &(0x7f00000002c0)=""/102) semctl$IPC_RMID(r3, 0x0, 0x0) 23:30:40 executing program 4 (fault-call:4 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:40 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0xf0ffffff7f0000) [ 984.317664][ T8414] net_ratelimit: 27 callbacks suppressed [ 984.317675][ T8414] dccp_invalid_packet: P.Data Offset(101) too large 23:30:40 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4101, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x9, &(0x7f00000000c0)={[0x6b]}, 0x8) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240), 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) fcntl$setstatus(r4, 0x4, 0x400) r7 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_pts(r7, 0x20140) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000240)={r13}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000240)={r14}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={r14, 0x1f, 0x7787, 0x1, 0x1, 0x3}, &(0x7f0000000140)=0x14) r15 = fcntl$dupfd(r8, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) write(r15, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7837cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75b8eadb2a00", 0x48) [ 984.420818][ T8414] dccp_invalid_packet: P.Data Offset(101) too large [ 984.444638][ T8420] sg_write: 4 callbacks suppressed [ 984.444656][ T8420] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 984.444656][ T8420] program syz-executor.4 not setting count and/or reply_len properly [ 984.492837][ T8420] FAULT_INJECTION: forcing a failure. [ 984.492837][ T8420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:30:40 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$FUSE_LSEEK(r6, &(0x7f0000000080)={0x18, 0x0, 0x7, {0x3}}, 0x18) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)) [ 984.627779][ T8420] CPU: 1 PID: 8420 Comm: syz-executor.4 Not tainted 5.5.0-rc7-syzkaller #0 [ 984.636548][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.646729][ T8420] Call Trace: [ 984.650056][ T8420] dump_stack+0x197/0x210 [ 984.653943][ T8527] dccp_invalid_packet: P.Data Offset(101) too large [ 984.654411][ T8420] should_fail.cold+0xa/0x15 [ 984.665605][ T8420] ? fault_create_debugfs_attr+0x180/0x180 [ 984.671457][ T8420] ? __kasan_check_read+0x11/0x20 [ 984.676538][ T8420] should_fail_alloc_page+0x50/0x60 [ 984.681834][ T8420] __alloc_pages_nodemask+0x1a1/0x910 [ 984.681863][ T8420] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 984.681886][ T8420] ? __alloc_pages_slowpath+0x2900/0x2900 [ 984.681900][ T8420] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 984.681927][ T8420] ? __kmalloc+0x608/0x770 [ 984.681943][ T8420] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 984.693775][ T8527] dccp_invalid_packet: P.Data Offset(101) too large [ 984.693866][ T8420] alloc_pages_current+0x107/0x210 [ 984.716504][ T8420] sg_build_indirect.isra.0+0x3d5/0xa10 [ 984.716536][ T8420] sg_common_write.isra.0+0xa89/0x2470 [ 984.716565][ T8420] ? sg_open+0x19a0/0x19a0 [ 984.716583][ T8420] ? vprintk_func+0x86/0x189 [ 984.716611][ T8420] ? printk+0xba/0xed [ 984.716636][ T8420] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 984.758389][ T8420] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 984.764535][ T8420] ? ___ratelimit+0x60/0x595 [ 984.769153][ T8420] sg_write.part.0+0x7f7/0xe80 [ 984.773970][ T8420] ? sg_ioctl+0x28a0/0x28a0 [ 984.778513][ T8420] ? __lockdep_free_key_range+0x120/0x120 [ 984.784257][ T8420] ? perf_trace_lock+0xeb/0x4c0 [ 984.789292][ T8420] ? __fget+0x35d/0x550 [ 984.793476][ T8420] ? find_held_lock+0x35/0x130 [ 984.798267][ T8420] ? __fget+0x35d/0x550 [ 984.802456][ T8420] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 984.808135][ T8420] ? common_file_perm+0x2f3/0x940 [ 984.813283][ T8420] ? rcu_read_lock_held+0x9c/0xb0 [ 984.818433][ T8420] ? apparmor_path_rmdir+0x30/0x30 [ 984.823688][ T8420] ? __fget+0x37f/0x550 [ 984.827872][ T8420] sg_write+0x6e/0x93 [ 984.831892][ T8420] __vfs_write+0x8a/0x110 [ 984.836341][ T8420] ? sg_write.part.0+0xe80/0xe80 [ 984.841322][ T8420] vfs_write+0x268/0x5d0 [ 984.845602][ T8420] ksys_write+0x14f/0x290 [ 984.850116][ T8420] ? __ia32_sys_read+0xb0/0xb0 [ 984.854931][ T8420] ? do_syscall_64+0x26/0x790 [ 984.859630][ T8420] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.865718][ T8420] ? do_syscall_64+0x26/0x790 [ 984.870425][ T8420] __x64_sys_write+0x73/0xb0 [ 984.875067][ T8420] do_syscall_64+0xfa/0x790 [ 984.879599][ T8420] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.885516][ T8420] RIP: 0033:0x45b349 [ 984.889524][ T8420] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.909775][ T8420] RSP: 002b:00007fc4d0ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 984.918292][ T8420] RAX: ffffffffffffffda RBX: 00007fc4d0ccc6d4 RCX: 000000000045b349 23:30:41 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650021000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @sco, @l2={0x1f, 0x1d77, @fixed={[], 0x11}, 0x5, 0x1}, @ipx={0x4, 0x52bf, 0xb96, "6cb72534eb03", 0x8}, 0xffe1, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='rose0\x00', 0x8, 0x800, 0x2}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x4, 0x2, 0xff, 0xa, 0x0, 0x9}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f00000003c0)='/dev/vcsu#\x00', 0x5, 0x3a0000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x100000000011, 0x2, 0x0) bind(r5, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba7502f6c59e7f202738f6e3d2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027eccaf3f6db1c000100000000000000497400000000000000069e735ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) sendmmsg(r4, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)="86695a361aedc8b7c4b983cb88ca", 0x1000e}], 0x1}}], 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) r7 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r9, @ANYBLOB="000428bd7000fbdbdf25210000000400ff00a8008480180001004806edbd6e32a8ec02211207429d7b5d1b37c8aa230001001e4339db1d7d3c14b23de225ac25981b152d466185ff0f100052128faf30d7000a0005000180c2000000000008000200000000000a000500aaaaaaaaaa410000220001000ff2c50cde336a041f9f93985932a1b7406fe754787d74ab6f2f368c59ec0000240001004d7148f2f3d3f6cbae6840ca5ad47a536ab76fb5264cdb2d43315109cb3bde3b"], 0xc0}}, 0x400c881) socket$can_bcm(0x1d, 0x2, 0x2) [ 984.926495][ T8420] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000003 [ 984.934486][ T8420] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 984.943283][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 984.951400][ T8420] R13: 0000000000000c09 R14: 00000000004c8b2b R15: 0000000000000001 23:30:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8003, 0x29aa46) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) [ 985.039896][ T8534] dccp_invalid_packet: P.Data Offset(101) too large [ 985.116227][ T8534] dccp_invalid_packet: P.Data Offset(101) too large [ 985.118779][ T8535] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 985.118779][ T8535] program syz-executor.5 not setting count and/or reply_len properly 23:30:41 executing program 4 (fault-call:4 fault-nth:2): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x8000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) r4 = socket$inet(0x2, 0x800, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x28}, @loopback, r7}, 0xc) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:41 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) exit(0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0x40000000, 0x6, 0x8, 0x80, 0x7, 0x400}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x9) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@x25={0x9, @null=' \x00'}, 0x80) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) sendmmsg(r5, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)="86695a361aedc8b7c4b983cb88ca", 0x1000e}], 0x1}}], 0x1, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r7, 0x1, 0x6, @dev={[], 0x2e}}, 0x10) [ 985.394827][ T8682] dccp_invalid_packet: P.Data Offset(101) too large [ 985.414890][ T8698] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 985.414890][ T8698] program syz-executor.4 not setting count and/or reply_len properly [ 985.444940][ T8682] dccp_invalid_packet: P.Data Offset(101) too large [ 985.450323][ T8698] FAULT_INJECTION: forcing a failure. [ 985.450323][ T8698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 985.512263][ T8698] CPU: 0 PID: 8698 Comm: syz-executor.4 Not tainted 5.5.0-rc7-syzkaller #0 [ 985.521066][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.531167][ T8698] Call Trace: [ 985.534507][ T8698] dump_stack+0x197/0x210 [ 985.538979][ T8698] should_fail.cold+0xa/0x15 [ 985.543604][ T8698] ? fault_create_debugfs_attr+0x180/0x180 [ 985.549563][ T8698] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 985.555290][ T8698] ? rcu_read_lock_any_held.part.0+0x50/0x50 23:30:41 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 985.561306][ T8698] should_fail_alloc_page+0x50/0x60 [ 985.566531][ T8698] __alloc_pages_nodemask+0x1a1/0x910 [ 985.572002][ T8698] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 985.578182][ T8698] ? __alloc_pages_slowpath+0x2900/0x2900 [ 985.583923][ T8698] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 985.590101][ T8698] ? __kmalloc+0x608/0x770 [ 985.594534][ T8698] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 985.600803][ T8698] alloc_pages_current+0x107/0x210 [ 985.606044][ T8698] sg_build_indirect.isra.0+0x3d5/0xa10 [ 985.611639][ T8698] sg_common_write.isra.0+0xa89/0x2470 [ 985.617226][ T8698] ? sg_open+0x19a0/0x19a0 [ 985.621664][ T8698] ? vprintk_func+0x86/0x189 [ 985.626274][ T8698] ? printk+0xba/0xed [ 985.630377][ T8698] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 985.635861][ T8698] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 985.635869][ T8754] dccp_invalid_packet: P.Data Offset(101) too large [ 985.637979][ T8754] dccp_invalid_packet: P.Data Offset(101) too large [ 985.641773][ T8698] ? ___ratelimit+0x60/0x595 [ 985.641797][ T8698] sg_write.part.0+0x7f7/0xe80 [ 985.641820][ T8698] ? sg_ioctl+0x28a0/0x28a0 [ 985.641840][ T8698] ? __lockdep_free_key_range+0x120/0x120 [ 985.641853][ T8698] ? perf_trace_lock+0xeb/0x4c0 [ 985.641873][ T8698] ? __fget+0x35d/0x550 [ 985.684092][ T8698] ? find_held_lock+0x35/0x130 [ 985.688976][ T8698] ? __fget+0x35d/0x550 [ 985.693291][ T8698] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 985.698999][ T8698] ? common_file_perm+0x2f3/0x940 [ 985.704083][ T8698] ? rcu_read_lock_held+0x9c/0xb0 23:30:42 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 985.709197][ T8698] ? apparmor_path_rmdir+0x30/0x30 [ 985.714443][ T8698] ? __fget+0x37f/0x550 [ 985.718641][ T8698] sg_write+0x6e/0x93 [ 985.722666][ T8698] __vfs_write+0x8a/0x110 [ 985.727372][ T8698] ? sg_write.part.0+0xe80/0xe80 [ 985.732569][ T8698] vfs_write+0x268/0x5d0 [ 985.736852][ T8698] ksys_write+0x14f/0x290 [ 985.741208][ T8698] ? __ia32_sys_read+0xb0/0xb0 [ 985.746000][ T8698] ? do_syscall_64+0x26/0x790 [ 985.750699][ T8698] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.756990][ T8698] ? do_syscall_64+0x26/0x790 [ 985.761694][ T8698] __x64_sys_write+0x73/0xb0 [ 985.766315][ T8698] do_syscall_64+0xfa/0x790 [ 985.771215][ T8698] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.777122][ T8698] RIP: 0033:0x45b349 [ 985.781068][ T8698] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.801836][ T8698] RSP: 002b:00007fc4d0caac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 985.810279][ T8698] RAX: ffffffffffffffda RBX: 00007fc4d0cab6d4 RCX: 000000000045b349 [ 985.821142][ T8698] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000003 [ 985.829249][ T8698] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 985.837262][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 985.845254][ T8698] R13: 0000000000000c09 R14: 00000000004c8b2b R15: 0000000000000002 23:30:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) keyctl$get_keyring_id(0x0, 0x0, 0x9) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x5, 0x8000) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/31) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:42 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff0200000000000000000000000000010000000065004c000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:42 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1001) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) [ 986.067098][ T8864] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 986.067098][ T8864] program syz-executor.5 not setting count and/or reply_len properly 23:30:42 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:43 executing program 4 (fault-call:4 fault-nth:3): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x4, 0x2}}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x20002, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={r8}, 0x8) sendfile(r5, r6, &(0x7f00000002c0)=0xd4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in6=@loopback}}, {{@in6}}}, &(0x7f00000000c0)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) 23:30:43 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0x2c, 0x3, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000200)=0x5) socketpair(0x4, 0x6, 0x3, &(0x7f0000000080)) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000000c0)={0x4, "4fba9bdc1ba86cf0c2903834f82293035da35faebfa431ba5eedea3bdf9c9305", 0x0, 0x2, 0x0, 0x1, 0x2}) 23:30:43 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffd, 0x48382) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$inet(0x2, 0x0, 0x1) ppoll(&(0x7f0000000200)=[{r0, 0x4}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x8939]}, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0xf, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x5f, 0x0, 0x61, 0x2e]}}, &(0x7f0000000080)=""/197, 0x2b, 0xc5, 0x1}, 0x20) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) write(r2, 0x0, 0x57) [ 986.769946][ T8977] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 986.769946][ T8977] program syz-executor.5 not setting count and/or reply_len properly 23:30:43 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 986.866439][ T9101] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 986.866439][ T9101] program syz-executor.4 not setting count and/or reply_len properly [ 986.903636][ T9101] FAULT_INJECTION: forcing a failure. [ 986.903636][ T9101] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 986.992605][ T9101] CPU: 0 PID: 9101 Comm: syz-executor.4 Not tainted 5.5.0-rc7-syzkaller #0 [ 987.001255][ T9101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.011956][ T9101] Call Trace: [ 987.015282][ T9101] dump_stack+0x197/0x210 [ 987.019653][ T9101] should_fail.cold+0xa/0x15 [ 987.024379][ T9101] ? fault_create_debugfs_attr+0x180/0x180 [ 987.030220][ T9101] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 987.035932][ T9101] ? rcu_read_lock_any_held.part.0+0x50/0x50 23:30:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x8, 0x0) socket$xdp(0x2c, 0x3, 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000000)=0x4) [ 987.041950][ T9101] should_fail_alloc_page+0x50/0x60 [ 987.047445][ T9101] __alloc_pages_nodemask+0x1a1/0x910 [ 987.052941][ T9101] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 987.059126][ T9101] ? __alloc_pages_slowpath+0x2900/0x2900 [ 987.064869][ T9101] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 987.072403][ T9101] ? __kmalloc+0x608/0x770 [ 987.076854][ T9101] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 987.083129][ T9101] alloc_pages_current+0x107/0x210 [ 987.088277][ T9101] sg_build_indirect.isra.0+0x3d5/0xa10 [ 987.093939][ T9101] sg_common_write.isra.0+0xa89/0x2470 [ 987.099466][ T9101] ? sg_open+0x19a0/0x19a0 [ 987.103905][ T9101] ? vprintk_func+0x86/0x189 [ 987.108534][ T9101] ? printk+0xba/0xed [ 987.112743][ T9101] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 987.118233][ T9101] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 987.124060][ T9101] ? ___ratelimit+0x60/0x595 [ 987.128779][ T9101] sg_write.part.0+0x7f7/0xe80 [ 987.133919][ T9101] ? sg_ioctl+0x28a0/0x28a0 [ 987.138456][ T9101] ? __lockdep_free_key_range+0x120/0x120 [ 987.144198][ T9101] ? perf_trace_lock+0xeb/0x4c0 [ 987.149078][ T9101] ? __fget+0x35d/0x550 [ 987.153253][ T9101] ? find_held_lock+0x35/0x130 [ 987.158031][ T9101] ? __fget+0x35d/0x550 [ 987.162221][ T9101] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 987.167923][ T9101] ? common_file_perm+0x2f3/0x940 [ 987.173090][ T9101] ? rcu_read_lock_held+0x9c/0xb0 [ 987.178139][ T9101] ? apparmor_path_rmdir+0x30/0x30 [ 987.183378][ T9101] ? __fget+0x37f/0x550 [ 987.187563][ T9101] sg_write+0x6e/0x93 [ 987.192525][ T9101] __vfs_write+0x8a/0x110 [ 987.196869][ T9101] ? sg_write.part.0+0xe80/0xe80 [ 987.201832][ T9101] vfs_write+0x268/0x5d0 [ 987.206099][ T9101] ksys_write+0x14f/0x290 [ 987.210453][ T9101] ? __ia32_sys_read+0xb0/0xb0 [ 987.215431][ T9101] ? do_syscall_64+0x26/0x790 [ 987.220201][ T9101] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.226290][ T9101] ? do_syscall_64+0x26/0x790 [ 987.231004][ T9101] __x64_sys_write+0x73/0xb0 [ 987.236675][ T9101] do_syscall_64+0xfa/0x790 [ 987.241205][ T9101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.247223][ T9101] RIP: 0033:0x45b349 [ 987.251139][ T9101] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.270902][ T9101] RSP: 002b:00007fc4d0ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.279347][ T9101] RAX: ffffffffffffffda RBX: 00007fc4d0ccc6d4 RCX: 000000000045b349 23:30:43 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000)) 23:30:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) accept4(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x80, 0x80000) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000000)=0xe) [ 987.287427][ T9101] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000003 [ 987.295420][ T9101] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 987.303409][ T9101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 987.311490][ T9101] R13: 0000000000000c09 R14: 00000000004c8b2b R15: 0000000000000003 23:30:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, 0x0, 0x0) [ 987.355805][ T9199] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 987.355805][ T9199] program syz-executor.5 not setting count and/or reply_len properly 23:30:43 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:43 executing program 4 (fault-call:4 fault-nth:4): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r4}}, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x40100) ioctl$GIO_UNIMAP(r8, 0x4b66, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:43 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000000)={{0x0, 0x0, @reserved="f3b666ccee1fd5d13719617a9c46762023d38a710461807b831240bc504b8a13"}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x80000) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffc, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) write(r4, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000100)=0x24e5, 0x4) 23:30:43 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = fcntl$dupfd(r7, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_FIEMAP(r10, 0xc020660b, &(0x7f0000000240)={0x8, 0x401, 0x6, 0xf72, 0x8, [{0xd9, 0x8001, 0x595, [], 0x2}, {0x5, 0xfff, 0x5, [], 0x84}, {0x2, 0x5, 0x81, [], 0x2}, {0x6, 0x9, 0xfffffffffffffff8, [], 0x2}, {0x0, 0x4, 0x1, [], 0x500}, {0x80000000, 0x4, 0x1, [], 0x384}, {0xff, 0x5, 0x6, [], 0x1}, {0x100000000, 0x4, 0x6, [], 0x1000}]}) 23:30:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/ocfs2_control\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x20) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x80000) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000580)={0x81, "9231705dd785633afdd96fd3477448934b363303cfdaeaaa79e19f152435ed391a12510a3471beb3337127f5137ed892ee6720c9d80a1dd0aa954069c93090863dea0e7172350ca3438a5283583fb4c57d1f1067fb3c48cdb14a176a1de913365df6a2c9603c38b694b7f04a0e5d41c8f7bffb89efb1cfb804f5cac51e5d66a8d19d177cafe9a97a53b71edca40e12a72ecacfacd1d180ec948db30e5cc2d7871bc4703dccf555489a57b3cf46e71fbdac1036174c1221896503cb16f71ff67f803d83738f02ebe726189e874c350b940a4785614ae0a3a637ee3bdff5dbfd061547217b956b58839a4b6b21bed12e48100afabe3694fbf00921fbff661dbff8"}) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x181002) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000080)=0x4) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) getsockname(r5, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x218, 0x401}, 0x40, 0x0, 0x3}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$peeksig(0x4209, r6, &(0x7f00000000c0)={0x0, 0x0, 0x6}, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}]) 23:30:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendto$l2tp(r3, &(0x7f0000000000)="21ab73d113289f615be099b731fe460443b22dbaf605fbb1d7c165338d4e128bfc9a53b9c04e61b4c726d6f56985733b97c86970c4590d4f93070b45f234ed8a31e667486658220b1d831e33119fba95ba8b33a4f347", 0x56, 0x4000, &(0x7f0000000080)={0x2, 0x0, @multicast1, 0x2}, 0x10) 23:30:44 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 987.924035][ T9507] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 987.924035][ T9507] program syz-executor.4 not setting count and/or reply_len properly 23:30:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x3a801) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = dup2(r0, r1) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RUNLINKAT(r7, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r9}, 0x8) write(r5, 0x0, 0x0) [ 988.092782][ T9507] FAULT_INJECTION: forcing a failure. [ 988.092782][ T9507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 988.134279][ T9507] CPU: 1 PID: 9507 Comm: syz-executor.4 Not tainted 5.5.0-rc7-syzkaller #0 [ 988.142924][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.153025][ T9507] Call Trace: [ 988.156350][ T9507] dump_stack+0x197/0x210 [ 988.160733][ T9507] should_fail.cold+0xa/0x15 [ 988.165356][ T9507] ? fault_create_debugfs_attr+0x180/0x180 [ 988.171198][ T9507] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 988.176885][ T9507] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 988.182936][ T9507] should_fail_alloc_page+0x50/0x60 [ 988.188202][ T9507] __alloc_pages_nodemask+0x1a1/0x910 [ 988.193724][ T9507] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 988.199915][ T9507] ? __alloc_pages_slowpath+0x2900/0x2900 [ 988.205753][ T9507] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 988.211788][ T9507] ? __kmalloc+0x608/0x770 [ 988.216231][ T9507] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 988.222511][ T9507] alloc_pages_current+0x107/0x210 [ 988.227785][ T9507] sg_build_indirect.isra.0+0x3d5/0xa10 [ 988.233370][ T9507] sg_common_write.isra.0+0xa89/0x2470 [ 988.238874][ T9507] ? sg_open+0x19a0/0x19a0 [ 988.243318][ T9507] ? vprintk_func+0x86/0x189 [ 988.247938][ T9507] ? printk+0xba/0xed [ 988.251953][ T9507] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 988.257536][ T9507] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 988.263478][ T9507] ? ___ratelimit+0x60/0x595 [ 988.268093][ T9507] sg_write.part.0+0x7f7/0xe80 [ 988.273003][ T9507] ? sg_ioctl+0x28a0/0x28a0 [ 988.277520][ T9507] ? __lockdep_free_key_range+0x120/0x120 [ 988.283373][ T9507] ? perf_trace_lock+0xeb/0x4c0 [ 988.288252][ T9507] ? __fget+0x35d/0x550 [ 988.292434][ T9507] ? find_held_lock+0x35/0x130 [ 988.297222][ T9507] ? __fget+0x35d/0x550 [ 988.301406][ T9507] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 988.307069][ T9507] ? common_file_perm+0x2f3/0x940 [ 988.312221][ T9507] ? rcu_read_lock_held+0x9c/0xb0 [ 988.317274][ T9507] ? apparmor_path_rmdir+0x30/0x30 [ 988.322407][ T9507] ? __fget+0x37f/0x550 [ 988.326595][ T9507] sg_write+0x6e/0x93 [ 988.330603][ T9507] __vfs_write+0x8a/0x110 [ 988.334951][ T9507] ? sg_write.part.0+0xe80/0xe80 [ 988.339918][ T9507] vfs_write+0x268/0x5d0 [ 988.344192][ T9507] ksys_write+0x14f/0x290 [ 988.348652][ T9507] ? __ia32_sys_read+0xb0/0xb0 [ 988.353444][ T9507] ? do_syscall_64+0x26/0x790 [ 988.358141][ T9507] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.364232][ T9507] ? do_syscall_64+0x26/0x790 [ 988.368938][ T9507] __x64_sys_write+0x73/0xb0 [ 988.373562][ T9507] do_syscall_64+0xfa/0x790 [ 988.378093][ T9507] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.384119][ T9507] RIP: 0033:0x45b349 [ 988.388028][ T9507] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 988.408695][ T9507] RSP: 002b:00007fc4d0ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 988.417839][ T9507] RAX: ffffffffffffffda RBX: 00007fc4d0ccc6d4 RCX: 000000000045b349 [ 988.425996][ T9507] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000003 23:30:44 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000180)) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) creat(&(0x7f0000000340)='./file0\x00', 0x83) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x68, r9, 0x957e114b87e50c29, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x3ff, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0004ff070000fddbdf2501000000000000000141000000180017000000110000040069623a74756e6c30000000000e4bdaa906f53b7485752e7bba8e97125782afaf12426c8930d585cc5276593c58b9aa5820427f0c034dc15afd35405fb1b99dd2fc31ab52e4bcd516ae20fc986ed38a8fa7c6b9fa334f11ea8a732f0e06ba181d0ec08dcec746beecb645f5289c5e34da38aac16fcc9b5312ec708a89e4523dc97a4a71185766db853759b6d496b67750e8637a174659f0b512b76206bcfe0d4a29f3bbf986602215c09cd0a56a18c9e24735b35443444c5e0afdb3491a818362984cbb016f9842"], 0x34}, 0x1, 0x0, 0x0, 0x44048880}, 0x4044021) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000000)=0x5b) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xcb, 0x90000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x2, 0x20, 0x4, 0x6}, &(0x7f00000000c0)=0x18) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x418400, 0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @loopback}}}, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x101000, 0x0) ioctl$PPPIOCCONNECT(r5, 0x4004743a, &(0x7f0000000240)=0x3) write(r0, 0x0, 0x0) 23:30:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x5000, @dev={0xfe, 0x80, [], 0x1c}, 0x6}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x80000000, @loopback, 0x8000}}, 0x9e, 0x1}, 0x90) write(r0, 0x0, 0x0) [ 988.433985][ T9507] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 988.434200][ T9752] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 988.434200][ T9752] program syz-executor.5 not setting count and/or reply_len properly [ 988.441992][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 988.442003][ T9507] R13: 0000000000000c09 R14: 00000000004c8b2b R15: 0000000000000004 23:30:44 executing program 4 (fault-call:4 fault-nth:5): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:44 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x4, 0x90, [], 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/144}, &(0x7f00000001c0)=0x78) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000200)=0xe) 23:30:45 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 988.816049][ T9943] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 988.816049][ T9943] program syz-executor.4 not setting count and/or reply_len properly 23:30:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x68, r3, 0x957e114b87e50c29, 0x0, 0x0, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x3ff, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) write(r0, 0x0, 0x0) [ 988.933099][ T9943] FAULT_INJECTION: forcing a failure. [ 988.933099][ T9943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:30:45 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 988.995081][ T9943] CPU: 1 PID: 9943 Comm: syz-executor.4 Not tainted 5.5.0-rc7-syzkaller #0 [ 989.003867][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.013941][ T9943] Call Trace: [ 989.017334][ T9943] dump_stack+0x197/0x210 [ 989.021699][ T9943] should_fail.cold+0xa/0x15 [ 989.026430][ T9943] ? fault_create_debugfs_attr+0x180/0x180 [ 989.032313][ T9943] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 989.037996][ T9943] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 989.044014][ T9943] should_fail_alloc_page+0x50/0x60 [ 989.049250][ T9943] __alloc_pages_nodemask+0x1a1/0x910 [ 989.054649][ T9943] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 989.060835][ T9943] ? __alloc_pages_slowpath+0x2900/0x2900 [ 989.066586][ T9943] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 989.072598][ T9943] ? __kmalloc+0x608/0x770 [ 989.077051][ T9943] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 989.083323][ T9943] alloc_pages_current+0x107/0x210 [ 989.088560][ T9943] sg_build_indirect.isra.0+0x3d5/0xa10 [ 989.094146][ T9943] sg_common_write.isra.0+0xa89/0x2470 [ 989.099746][ T9943] ? sg_open+0x19a0/0x19a0 [ 989.104185][ T9943] ? vprintk_func+0x86/0x189 [ 989.108798][ T9943] ? printk+0xba/0xed [ 989.112915][ T9943] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 989.118404][ T9943] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 989.124270][ T9943] ? ___ratelimit+0x60/0x595 [ 989.129076][ T9943] sg_write.part.0+0x7f7/0xe80 [ 989.133870][ T9943] ? sg_ioctl+0x28a0/0x28a0 [ 989.138402][ T9943] ? __lockdep_free_key_range+0x120/0x120 [ 989.144140][ T9943] ? perf_trace_lock+0xeb/0x4c0 [ 989.149026][ T9943] ? __fget+0x35d/0x550 [ 989.153376][ T9943] ? find_held_lock+0x35/0x130 [ 989.158156][ T9943] ? __fget+0x35d/0x550 [ 989.162347][ T9943] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 989.168000][ T9943] ? common_file_perm+0x2f3/0x940 [ 989.173043][ T9943] ? rcu_read_lock_held+0x9c/0xb0 [ 989.178224][ T9943] ? apparmor_path_rmdir+0x30/0x30 [ 989.183361][ T9943] ? __fget+0x37f/0x550 [ 989.187607][ T9943] sg_write+0x6e/0x93 [ 989.191629][ T9943] __vfs_write+0x8a/0x110 [ 989.196129][ T9943] ? sg_write.part.0+0xe80/0xe80 [ 989.201094][ T9943] vfs_write+0x268/0x5d0 [ 989.205367][ T9943] ksys_write+0x14f/0x290 [ 989.209845][ T9943] ? __ia32_sys_read+0xb0/0xb0 [ 989.214799][ T9943] ? do_syscall_64+0x26/0x790 [ 989.219492][ T9943] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.225583][ T9943] ? do_syscall_64+0x26/0x790 [ 989.230324][ T9943] __x64_sys_write+0x73/0xb0 [ 989.234942][ T9943] do_syscall_64+0xfa/0x790 [ 989.239490][ T9943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.245403][ T9943] RIP: 0033:0x45b349 [ 989.249312][ T9943] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.269087][ T9943] RSP: 002b:00007fc4d0ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 989.277989][ T9943] RAX: ffffffffffffffda RBX: 00007fc4d0ccc6d4 RCX: 000000000045b349 [ 989.286232][ T9943] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000003 23:30:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) getpgid(r3) [ 989.294291][ T9943] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 989.302288][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 989.310387][ T9943] R13: 0000000000000c09 R14: 00000000004c8b2b R15: 0000000000000005 [ 989.360424][T10097] net_ratelimit: 24 callbacks suppressed [ 989.360435][T10097] dccp_invalid_packet: P.Data Offset(101) too large [ 989.378740][T10097] dccp_invalid_packet: P.Data Offset(101) too large 23:30:45 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 989.488401][T10213] dccp_invalid_packet: invalid packet type [ 989.518098][T10213] dccp_invalid_packet: invalid packet type 23:30:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000080)={0x5, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1, 0x3, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @multicast2}}]}, 0x210) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) close(r3) ioctl$SOUND_MIXER_READ_CAPS(r2, 0x80044dfc, &(0x7f0000000000)) socket$inet6_udplite(0xa, 0x2, 0x88) write(r0, 0x0, 0x0) 23:30:45 executing program 4 (fault-call:4 fault-nth:6): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:45 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8000, 0x121000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000000)=0xe) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_DEBUGREGS(r5, 0x8080aea1, &(0x7f0000000100)) [ 989.637111][T10230] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 989.637111][T10230] program syz-executor.4 not setting count and/or reply_len properly 23:30:46 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000004000000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) [ 989.735850][T10230] FAULT_INJECTION: forcing a failure. [ 989.735850][T10230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 989.762699][T10230] CPU: 0 PID: 10230 Comm: syz-executor.4 Not tainted 5.5.0-rc7-syzkaller #0 [ 989.771618][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.781702][T10230] Call Trace: [ 989.785012][T10230] dump_stack+0x197/0x210 [ 989.789562][T10230] should_fail.cold+0xa/0x15 [ 989.794188][T10230] ? fault_create_debugfs_attr+0x180/0x180 [ 989.800036][T10230] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 989.806341][T10230] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 989.812355][T10230] should_fail_alloc_page+0x50/0x60 [ 989.817572][T10230] __alloc_pages_nodemask+0x1a1/0x910 [ 989.823767][T10230] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 989.829948][T10230] ? __alloc_pages_slowpath+0x2900/0x2900 [ 989.835825][T10230] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 989.841856][T10230] ? __kmalloc+0x608/0x770 [ 989.846297][T10230] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 989.852568][T10230] alloc_pages_current+0x107/0x210 [ 989.857717][T10230] sg_build_indirect.isra.0+0x3d5/0xa10 [ 989.863400][T10230] sg_common_write.isra.0+0xa89/0x2470 [ 989.868889][T10230] ? sg_open+0x19a0/0x19a0 [ 989.873444][T10230] ? vprintk_func+0x86/0x189 [ 989.875218][T10246] dccp_invalid_packet: P.Data Offset(101) too large 23:30:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffd, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x7) [ 989.878051][T10230] ? printk+0xba/0xed [ 989.878070][T10230] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 989.878092][T10230] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 989.878112][T10230] ? ___ratelimit+0x60/0x595 [ 989.904674][T10230] sg_write.part.0+0x7f7/0xe80 [ 989.909465][T10230] ? sg_ioctl+0x28a0/0x28a0 [ 989.914138][T10230] ? __lockdep_free_key_range+0x120/0x120 [ 989.919884][T10230] ? perf_trace_lock+0xeb/0x4c0 [ 989.924895][T10230] ? __fget+0x35d/0x550 [ 989.929158][T10230] ? find_held_lock+0x35/0x130 [ 989.933941][T10230] ? __fget+0x35d/0x550 [ 989.938127][T10230] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 989.943898][T10230] ? common_file_perm+0x2f3/0x940 [ 989.949099][T10230] ? rcu_read_lock_held+0x9c/0xb0 [ 989.951071][T10246] dccp_invalid_packet: P.Data Offset(101) too large [ 989.954149][T10230] ? apparmor_path_rmdir+0x30/0x30 [ 989.954169][T10230] ? __fget+0x37f/0x550 [ 989.954192][T10230] sg_write+0x6e/0x93 [ 989.954210][T10230] __vfs_write+0x8a/0x110 [ 989.954221][T10230] ? sg_write.part.0+0xe80/0xe80 [ 989.954241][T10230] vfs_write+0x268/0x5d0 [ 989.987976][T10230] ksys_write+0x14f/0x290 [ 989.992449][T10230] ? __ia32_sys_read+0xb0/0xb0 [ 989.997237][T10230] ? do_syscall_64+0x26/0x790 [ 990.001935][T10230] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.008220][T10230] ? do_syscall_64+0x26/0x790 [ 990.012928][T10230] __x64_sys_write+0x73/0xb0 [ 990.017660][T10230] do_syscall_64+0xfa/0x790 [ 990.022204][T10230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.028119][T10230] RIP: 0033:0x45b349 23:30:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xd) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xb0, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1a9c}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r2, 0x0, 0x0) [ 990.032035][T10230] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.051785][T10230] RSP: 002b:00007fc4d0ccbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.060768][T10230] RAX: ffffffffffffffda RBX: 00007fc4d0ccc6d4 RCX: 000000000045b349 [ 990.068858][T10230] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000003 [ 990.076856][T10230] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 23:30:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000000)=0x8) [ 990.084990][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 990.093111][T10230] R13: 0000000000000c09 R14: 00000000004c8b2b R15: 0000000000000006 23:30:46 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 990.235618][T10448] dccp_invalid_packet: P.Data Offset(101) too large [ 990.267980][T10448] dccp_invalid_packet: P.Data Offset(101) too large 23:30:46 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffa, 0x5c0c0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:30:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x1, 0x3) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000000c0)) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@empty}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8080) [ 990.423137][T10562] dccp_invalid_packet: P.Data Offset(101) too large [ 990.457179][T10562] dccp_invalid_packet: P.Data Offset(101) too large 23:30:46 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x60000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) 23:30:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:47 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x200) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x1}) r2 = socket$inet(0x2, 0x4, 0x82) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x1, 0x5}, 0x4, 0xc, 0x2, 0x7ff, 0xd, 'syz0\x00', "5873789a3e3408908000b91b3b6195d7542d314ea0c17a34bf9f4304141b7845", "913abebe3b16091769bb64ed3bd9a7677b8846caafaaa9bb6e71712baf628a82", [{0x0, 0x2eb, {0x1, 0x81}}, {0x3, 0x7f, {0x2, 0x800}}, {0xfffd, 0x1, {0x2, 0xf446}}, {0x1, 0xfffa, {0x2, 0xff}}, {0x9, 0x101, {0x3, 0x14c8}}, {0xfff9, 0x7, {0x3, 0x5}}, {0x1, 0x7, {0x1, 0x9}}, {0x4, 0xfff, {0x3, 0xdf92}}, {0x5, 0x4, {0x2, 0x4}}, {0x3, 0xfff9, {0x1, 0x4}}, {0x7f, 0x2, {0x0, 0x1}}, {0x6, 0x47, {0x1, 0x5}}, {0x5ac0, 0x98, {0x1, 0x1000}}, {0x400, 0x4, {0x3, 0x2}}, {0x8, 0xe767, {0x2, 0xff}}, {0x3ff, 0x1, {0x2, 0x6}}, {0x1c, 0x1, {0x2, 0x7}}, {0x3, 0x0, {0x2, 0x800}}, {0x81, 0x4, {0x0, 0x5}}, {0x0, 0x9f55, {0x2, 0xfffffa5f}}, {0x4bf, 0x626, {0x1, 0x7}}, {0x4, 0x6, {0x2, 0x80000000}}, {0x6, 0x3, {0x2, 0x7}}, {0x401, 0x1, {0x1, 0x2a0df8ad}}, {0x1, 0x5, {0x3, 0x75}}, {0xd7, 0x0, {0x3, 0xbe}}, {0x797d, 0x7, {0x1, 0x9}}, {0xff, 0x1, {0x1, 0x40}}, {0x3f, 0x8, {0x1, 0x1}}, {0x7, 0x8, {0x3, 0x7fff}}, {0x9, 0x81, {0x1, 0x5}}, {0x0, 0x3, {0x2, 0x7}}, {0x7, 0x7b6b, {0x3, 0x8}}, {0x4, 0x9, {0x1, 0x8}}, {0x4, 0x800, {0x2}}, {0x4, 0x7fff, {0x2, 0x10000}}, {0x8, 0x3f, {0x1, 0x10000}}, {0x4, 0x100, {0x1, 0x6}}, {0x2, 0x3, {0x6, 0x80000000}}, {0x4, 0x7fff, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) [ 990.918976][T10863] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 990.918976][T10863] program syz-executor.4 not setting count and/or reply_len properly 23:30:47 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650005000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:47 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2}, 0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write(r3, 0x0, 0x0) 23:30:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="c43db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:47 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000000)={0x3, 0x6}) 23:30:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:30:47 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 991.520569][T11214] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 991.520569][T11214] program syz-executor.4 not setting count and/or reply_len properly 23:30:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x4000c0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x804) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:48 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650008000800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) write(r0, 0x0, 0x0) 23:30:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x56061373, 0xba, 0x9a, 0xfff}, 0x14) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xfffffffffffffe00) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b6c4b85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:48 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 991.915542][T11415] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 991.915542][T11415] program syz-executor.4 not setting count and/or reply_len properly 23:30:48 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:30:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x64a302, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba7502f6c59e7f202738f6e3d2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027eccaf3f6db1c000100000000000000497400000000000000069e735ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) sendmmsg(r5, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)="86695a361aedc8b7c4b983cb88ca", 0x1000e}], 0x1}}], 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@empty, @loopback, r7}, 0xc) 23:30:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63dc45e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:48 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 992.260695][T11600] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 992.260695][T11600] program syz-executor.4 not setting count and/or reply_len properly 23:30:48 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) write(r0, 0x0, 0x0) 23:30:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db8c41e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 992.542271][T11765] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 992.542271][T11765] program syz-executor.4 not setting count and/or reply_len properly 23:30:48 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000300)) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x259a, &(0x7f00000002c0)=0x0) close(r7) io_submit(r8, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x28040, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000240)={r12}, 0x8) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) r16 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r16, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000000240)={r17}, 0x8) r18 = creat(&(0x7f0000000740)='./file0\x00', 0x100) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) r20 = fcntl$dupfd(r19, 0x0, r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r21, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r22 = dup(r21) io_submit(r8, 0x8, &(0x7f0000000980)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x82, r0, &(0x7f0000000080)="4aeab5e838eabcbd206f40d72f8361c2f7f3740a78990ce03334e7677dfa8b1c64a008b98a83b0be302da1848122b259912f15d9b9b98e45bb5ebdc6b425c6555bee65034291f1fa79ad9c2d2221a36f97cb997643d6911643fdb069b55cb0e970495bbae23735459ee3620320363732c699477bd979c8170e20dbf95c62eca9be48", 0x82, 0x74f9, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xfffe, r2, &(0x7f0000000340)="3d2d4aed277df9c6d03544c82ab0939db24000920e4b3561a2e35a22a4f05bcbe14de34f415666e5419bf6f9886341362435de2b0d459b3090bda5945b389562b0b81e856fd01bfae9ff77d5a4bf66feefb9bc8a6a609c28a1ebb5fd0326e240f5c8fca0372b2a702b1f01af3eaac81671b9d08b135a42f5ac3df7e84b64b6aa0736e5121e0ff6c7cb615d61900682e31fc47aca7f6cc28c55562bf8d1e15d1bb5c0e9c9d49b953e7174da83b8867daf8d860b4c822758621de7f6749a194ba32eaf5a95a21d7ba985b0bc4001738dfac755fe9e5b8f7335598605c6dccb49ab773c596d28bc692c25f1b9970e1c8ccaf36cfbfa94", 0xf5, 0x1f, 0x0, 0x1, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x5, r9, &(0x7f0000000280)="950d33bc7fa854ae041c6f3d1559f9906f4ff9d81af8d9d0c452479c10af44c38221359e54bc73c5b291b2d55084f5dacec9278291d771bfabadcbe386704848", 0x40, 0x5, 0x0, 0x1, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r10, &(0x7f0000000480)="0baac9e416656b24c700c2ab500412222b7e1af4c0742027f8ef6ef8d1ddc090b27fcf0f3f8adab939820bb05d4b81a99feedbb490707a0e0c42057029788deba63c4c2c7960dcb58d76898c3cd03f2afe7abb64dd50d97ee52609f57689f8e29225d61b8078d48a81f0d53f1568e06a0912e33664db8bdf81f6c50fd29c091d174a965c41d120ee802bfad8378cb7157e49568818764b6f2cdf51fdb4eebee82f484b7bfd280f7eb708053fbdf9687d5a7a7429060b1cb7e964d0981cea9e27e12f7d21dfb32175056c5aa919ddcb067966b7d27c5a072134719a8f73cf6e0a47ae71ccd8a156ab63d68b429378dbf1477081e0cce84c2c1d79f3", 0xfb, 0x8, 0x0, 0x0, r14}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x100, r15, &(0x7f00000005c0)="0f2a1ac9898b1163d426274f9403305344c2b0aa6efca2662c555d8e22de63413cd9489ed908a54e4013ebc66efcd87b9fa5e9d9279b5632285556dbead009831f9cd5cfc0535ac742555662ade61cdf460be9c7acc94907fb4ffb2ec706df5e74beea5387f1fa34d6f05dace1389310a27078964cedbd50718ed9f451714c2e7dffdb1c7bb423a58467f2ec0a983e8ee840e175ff", 0x95, 0x80000000, 0x0, 0x2, r4}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x19f, r0, &(0x7f00000006c0)="aaa33a4bd67274db19ffa3b89fa6a823529a941612af4274434422ccb84a92f4fe48935f439d9406fe88c63b5ce4a0aa01bcc955e922d58e9317d687692caf5c60e77675b6196a87c4cb10b01e41ff89a7", 0x51, 0xbc, 0x0, 0x0, r18}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x6, 0x1, r0, &(0x7f00000007c0)="c006e08aa77df34b207e02d5ce790d35bc95792c5c0558c87110ebce81a159784be338c99b8dd425cc3318293e4fa396756d11824b17390286d2285d68c42da25296c1372f54b20fb4765b3ea86151e99a781a2780b6305686630e415c1cc1facf5105bf2595ea9e3dbc156ac331182110eb3b7e0e7bb95605a7161889a2b89faeb8cf20de7a230cde8ade48ce57d7bab242162fba3434507abe098531ac849d4451dc3586e9", 0xa6, 0xc4ce, 0x0, 0x2, r20}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x4, r3, &(0x7f00000008c0)="02b4e2ab458919792a40556f317e364ecbeafe6fac4f2626f3ac6a168547947a90832b7d1e782ac245606557dfc1745c5b5a3d0054ca46faea890b82e8ece8c3fd6d2354a51556c7dfafa33bb4", 0x4d, 0x101, 0x0, 0x1, r22}]) r23 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r23, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fallocate(r23, 0x65, 0x59, 0x100) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r6, 0x4) r24 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r24, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e2400000000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:49 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x8000000, 0x60, 0x14}) write(r0, 0x0, 0x0) 23:30:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) write(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x1f, 0x0, 0x4, 0x100, 0x2, {r3, r4/1000+30000}, {0x0, 0x0, 0x1, 0x37, 0x80, 0x0, "bb6f9075"}, 0x0, 0xa, @planes=&(0x7f0000000080)={0x80000000, 0x3, @mem_offset=0x1, 0x8}, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000300)={"3a6a8690c885494dd18b9cde4226245469344b671a543f51217faa3586922b41a67ceb7af16a5a6b8b2b9da21f2a7105bd0313adf02dcaf97ba743341cdff91a51a0cda7b8db5710f87ecd6e9bc873fbfed65d98fc220117aacd3fc433b8d769f1a01cfd34b180808013d18d53f765489c0c84f85ef923e160d72dd08f5fac12e38dee2ebf233c9a6754166d675fb557141c3107c77480b4b1cf0c5597de7ed657d841634aabd5c22568a7924941cfb66de03953e95926e2567b72fda5fac1a86bbe9b2ebfbe61c035e90d1eb9c328f11cd6f418e00f063df912686681f28ce98296130d82f6159c27cded7573e41a7656b75b0db2efe558036ec8a1dd6544527517942669f15f5f262bdeb66c43cd23e98d28fd31324aac388900624c21bb30fcf11d0c8a9426fe5e30cb3429bfaf50c511c118bc8b9a177818389b7ec6fbe21dd85290a873e0d83f91b727bfb828fe52aff01d4df0f76da4549bfad31a20961a8a7aed61bf1c8c22e7ee7de930bf3fabef7903a7bffeeb79734520b2f685d20d543f466199842c4f3eabeccb508c833e61aa79e896bd99d521fc4a07720b6d07b82895b311749a17370feb561513c5a825b1225bc7c88f3ddc3256a0493f07b71f29628cc0e560e7a269ca47b637865d7deb89b5f21cf50c8970c8eb8124cf6bf614773d574c9aa4439cfaa16a5aa7ff0f79132f90724c82e5eee81f7bc3417c813b1c07174b9d35035a76a500757bb5c378c13d840f9f835b5d8c302583cffba4fcb8739c4a4adf038b6818d41a4e902928d4b2c121695178b63a6dd0396c77b1441f63f1183032ac55b1b2581b7a8302615ab8e2813280f3725964b15f6368d93fb9a3973ec8f84133de21f76e89ca66f19442a0103e0ccd1d7410147266bb966a6b6d022b89171615654b24fc43d6200230732b92ffd39272c7ccc46bdd240b08635440a6b617a29097137b6d0a43645025b7b4291f6856fb42a32d7e0465c422e6d4db4848a20e6a854e0692dc133c17885bafa146381472f92af3c81a134cabaaacf28c844923f6d827a0d838eb9dfddbecbd0bfe69b19933d92040b27f4172c3be045298b42a783729ef323021b5d425752efaa219a700007167a9e13a50f1377f9e454489907a164f5817a0a6f0bdddc879d9435c48690d5ba4bd9de4a337abcac75e49363eee2a1e88479023d3bef60f49491c9ffb4d3217f6aa91911729cb4b1842a85d5fa9df9c32d548f091d670ebed447652f8a37fffdc286b7ae7727b28689f6f6ed7014734c06538787daf27f60819a3a14fb2942b4606191c28b1aaa35403d1918aba3180f4c3be8d152956534cad4b0bb39d63b133118795bd51b1e5d4404c0756d4e573636c2af4dfc7caa6d3c7c1bbe82f1c7cd3d89f3153837821dfdcf184e3013e4ab777077cbec594416a8b61a5456dfe4a330de0"}) 23:30:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e308d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:49 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) readahead(r0, 0x6, 0x3f) [ 993.142733][T11892] sg_write: data in/out 167180/24 bytes for SCSI command 0xff-- guessing data in; [ 993.142733][T11892] program syz-executor.4 not setting count and/or reply_len properly 23:30:49 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85ec48d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:49 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) write(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x208, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc4, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="2166d039d8ef31af7bf9a86436526a81"}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_MASTER={0xdc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr="9c52ff68093b9dc1c0a4cad2a060d6e8"}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x29}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40}, 0x24040005) 23:30:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @multicast1}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000500)=0xe8) r4 = geteuid() r5 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) setuid(r6) r7 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) setuid(r8) r9 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) setuid(r10) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x100, 0x80, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r15 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r17 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r20 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r20, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r15, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r16, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r14, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r18, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r19, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r21, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) statx(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x800, 0x400, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r25 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r23, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r27 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r27, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000980)=0xe8) setuid(r28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r30 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r30, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r25, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r26, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r24, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r28, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r29, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r31, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r34 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r32, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r36 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r36, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r37) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r39 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r39, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r34, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r35, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r33, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r37, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r38, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r40, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) r41 = getegid() socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r44 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r42, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r46 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r46, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r47) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r49 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r49, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r44, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000ac0)=ANY=[@ANYBLOB="302000010000088882f10000000000656b21fd0ccc6f7e0b9c817ad06750273da9a779cda9599cc9232eb22b8658ba712df8252fdad030fca0fdca6e5f87084fa80c23e6501389d2bf1848b5c49ed7014a1f5577b91b7f19a51c5deb63fed4de94e8397349a5ca8889845e1642846fd338227f25975a8344a741c86864db367face9e33139327d4bd6e51184a459e819fc310fbca4cd2c10696b7bce04d840f610d08be2f77f725f3ef03cfdc3783241a35fb0ba7ad1a2eda252a363a6ea76725fb9259febde656c6d0b2e82695ffa92473475ef1a74f278ce19f734fe3e95cead59d7c09f47b51320aa399494aa933ef7c7613b8be69d68609cc95f2d3da9edcfcfaa02e606ecb576df0d1bc4fcc20f820e802ee63fd2ab5cf67a5fccb7b6bf4b0205cacd8344c784928ce3423ae047331a6f66370cb680444914a271091e1ae0f6fcd469d64a8c", @ANYRES32=r45, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r43, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r47, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r48, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r50, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x4}, [{0x2, 0x5}, {0x2, 0x8, r3}, {0x2, 0x6, r4}, {0x2, 0x3, r6}, {0x2, 0x4, r8}, {0x2, 0x5, r10}, {0x2, 0x6, r11}], {0x4, 0x4}, [{0x8, 0x0, r12}, {0x8, 0x7, r21}, {0x8, 0x6, r22}, {0x8, 0x4, r31}, {0x8, 0x2}, {0x8, 0x6, r40}, {0x8, 0x2, r41}, {0x8, 0x5, r48}], {0x10, 0x3}, {0x20, 0x1}}, 0x9c, 0x2) r51 = openat(0xffffffffffffffff, &(0x7f0000002800)='./file0\x00', 0x8000, 0x0) r52 = socket$nl_generic(0x10, 0x3, 0x10) r53 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r52, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r53, 0xc4c2c822e4e11799, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r51, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x1b0, r53, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xd4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x621f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9d1e}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc001ca0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x1b0}}, 0x40) getsockopt$inet_sctp_SCTP_EVENTS(r51, 0x84, 0xb, &(0x7f0000002840), &(0x7f0000000200)=0xe) [ 993.421116][T12002] sg_write: data in/out 167328/24 bytes for SCSI command 0xff-- guessing data in; [ 993.421116][T12002] program syz-executor.4 not setting count and/or reply_len properly 23:30:49 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1ec4020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 993.740595][T12217] sg_write: data in/out 181242/24 bytes for SCSI command 0xff-- guessing data in; [ 993.740595][T12217] program syz-executor.4 not setting count and/or reply_len properly 23:30:50 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000004da0bda6d05724a593400e35a48652010020001280f4ff00008c42ec8a616e0000"], 0x40}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) 23:30:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000200)=0xe) 23:30:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d030000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 993.908574][T12224] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:30:50 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 994.043765][T12280] sg_write: data in/out 232698/24 bytes for SCSI command 0xff-- guessing data in; [ 994.043765][T12280] program syz-executor.4 not setting count and/or reply_len properly 23:30:50 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d040000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={r8}, 0x8) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x200000, 0x81, {}, {0x2, 0x2, 0x1, 0x9, 0xd2, 0x7, "ac3973ed"}, 0x4, 0x4, @fd, 0x66d2, 0x0, r6}) write$cgroup_pid(r9, &(0x7f0000000100), 0x12) writev(r1, &(0x7f0000000080), 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:30:50 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d060000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x8000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r3, 0x356134e0d9c89162, 0x0, @in={0x2, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) r5 = fcntl$dupfd(r0, 0x0, r0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x10200, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000040)={0x3, 0x2, 0x1f, 0x1, 0x1a25, 0x7fff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_int(r7, 0x0, 0x16, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) [ 994.471945][T12445] net_ratelimit: 36 callbacks suppressed [ 994.471956][T12445] dccp_invalid_packet: P.Data Offset(101) too large [ 994.544998][T12445] dccp_invalid_packet: P.Data Offset(101) too large 23:30:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e0000100002800600009ea5426b2bc1cc58"], 0x40}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000000)={0x3e51, 0x69ec, 0x30ad58f3, 0xfffff1f2}, 0x10) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:30:50 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d290000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:51 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 994.667249][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 994.737783][T12558] sg_write: 2 callbacks suppressed [ 994.737818][T12558] sg_write: data in/out 2723066/24 bytes for SCSI command 0xff-- guessing data in; [ 994.737818][T12558] program syz-executor.4 not setting count and/or reply_len properly 23:30:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) shutdown(r2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000000)=0xe) [ 994.835944][T12638] dccp_invalid_packet: P.Data Offset(101) too large 23:30:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x6, 0x446080) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000000c0)={0x9e0000, 0x81, 0x90e, r0, 0x0, &(0x7f0000000080)={0x9a0920, 0xfffff000, [], @string=&(0x7f0000000000)=0x1f}}) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000100)={0x3ff, 0x0, 0x10001, 0xffff, 0x8b, "44a180fd0c2f2cd68a9302bec0ee9246ce7845", 0x3, 0xfffffffc}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000140)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:30:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d300000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 994.879761][T12638] dccp_invalid_packet: P.Data Offset(101) too large [ 995.019424][T12713] sg_write: data in/out 3181818/24 bytes for SCSI command 0xff-- guessing data in; [ 995.019424][T12713] program syz-executor.4 not setting count and/or reply_len properly 23:30:51 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x802, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000001300)}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x3, 0x4) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000140)={0x2, 0x9}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000240)={r9}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e20, 0x1000, @remote, 0x1f}}, 0x1}, 0x90) lookup_dcookie(0x7ff, &(0x7f0000000300)=""/4096, 0x1000) 23:30:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8dc40000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 995.191586][T12775] dccp_invalid_packet: P.Data Offset(101) too large [ 995.201756][T12775] dccp_invalid_packet: P.Data Offset(101) too large 23:30:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000000)={0x7, 0xfff, 0x780a, 0xf0}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x0, 0x86) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x259a, &(0x7f00000002c0)=0x0) close(r3) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_pgetevents(r4, 0x7, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000100)={0x0, 0x989680}, 0x0) [ 995.269220][T12778] sg_write: data in/out 12881146/24 bytes for SCSI command 0xff-- guessing data in; [ 995.269220][T12778] program syz-executor.4 not setting count and/or reply_len properly 23:30:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x9, 0x20000) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) write(r0, 0x0, 0x0) 23:30:51 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d010800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 995.403178][T12784] sg_write: data in/out 134319354/24 bytes for SCSI command 0xff-- guessing data in; [ 995.403178][T12784] program syz-executor.4 not setting count and/or reply_len properly [ 995.471046][T12814] dccp_invalid_packet: P.Data Offset(101) too large [ 995.504082][T12814] dccp_invalid_packet: P.Data Offset(101) too large 23:30:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d011000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:52 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 995.750176][T12995] sg_write: data in/out 268537082/24 bytes for SCSI command 0xff-- guessing data in; [ 995.750176][T12995] program syz-executor.4 not setting count and/or reply_len properly 23:30:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d001800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 995.973816][T12999] sg_write: data in/out 402689274/24 bytes for SCSI command 0xff-- guessing data in; [ 995.973816][T12999] program syz-executor.4 not setting count and/or reply_len properly 23:30:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d011800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 996.014639][T13003] dccp_invalid_packet: P.Data Offset(101) too large [ 996.035172][T13003] dccp_invalid_packet: P.Data Offset(101) too large 23:30:52 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500003f0800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = fcntl$dupfd(r3, 0x406, r0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000100)={0x2, r3}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000000c0)={r7, 0x1, 0x6, @link_local}, 0x10) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x141840, 0x0) ioctl$VIDIOC_OVERLAY(r8, 0x4004560e, &(0x7f0000000180)=0x9) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) [ 996.173215][T13106] sg_write: data in/out 402754810/24 bytes for SCSI command 0xff-- guessing data in; [ 996.173215][T13106] program syz-executor.4 not setting count and/or reply_len properly 23:30:52 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d002000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:52 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 996.502741][T13219] sg_write: data in/out 536907002/24 bytes for SCSI command 0xff-- guessing data in; [ 996.502741][T13219] program syz-executor.4 not setting count and/or reply_len properly 23:30:53 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500004c0800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d012000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x30, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=""/48}, &(0x7f0000000180)=0x78) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x950, 0x5, 0x1, 0x100, 0x2, 0x40}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000280)={{r5, r6+10000000}, {0x77359400}}, &(0x7f00000002c0)) [ 996.794679][T13228] sg_write: data in/out 536972538/24 bytes for SCSI command 0xff-- guessing data in; [ 996.794679][T13228] program syz-executor.4 not setting count and/or reply_len properly 23:30:53 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000600800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d002800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 996.994454][T13307] sg_write: data in/out 671124730/24 bytes for SCSI command 0xff-- guessing data in; [ 996.994454][T13307] program syz-executor.4 not setting count and/or reply_len properly 23:30:53 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d012800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:53 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500006c0800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001680)=ANY=[@ANYBLOB="09000000000000000a004e2200000005fe80000000000000000000000000003f010000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e2000007ffffe8000000000000000000000000000bb02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000a004e2200000002ff0100000000000000000000000000019a0b00"/400], 0x190) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0102000000000f000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r5, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f0000000000)={0x40, 0x0, 0x1017, 0x6, 0xc74, {0x1000, 0x8}}) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ptrace$setregset(0x4205, r7, 0x6, &(0x7f0000000340)={&(0x7f0000000680)="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", 0x1000}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r11}}, 0x48) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r12, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r11, r10}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0xfffffffe}, {0xa, 0x0, 0x0, @mcast1}, r11}}, 0x48) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000540)={&(0x7f0000000440)="7ef00ded25a08e6fc0b8a0bc36ad22ec1431e8325aa18ea4c0cb6e35f8f09969ccf12c8ae2634f34e4ddd23e3560f0b99f5d6809c840ed4c183d9b0529903d0829b6817f6c7739fd909f1854c49d5b5b38906414a7a3fc6f6632ee71e26e4836b1f9a754aa08a3bdcfeb930571e8c9cf68d39ae136e6128b4bb7c60678421111475c68f82043237e3e49f6c0f4212c8a57d9ade3802ae31396cc98b5b54bad0d8e62538a42fe2168793cbb7762dba918b10ca15101cecaa9", 0xb8, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r14, 0xc01064bd, &(0x7f00000005c0)={&(0x7f00000003c0)="6cfd181607273330d981e37cd9d5ef24f0e7ed13c4ace93bd6a2c2a61a1d30c076a4e6c4dff11eba13f112db19029fd7889204eaea8005f8e78bc35af901187b23634861de06f8a35972c1de4f210b16b03da9cbf01d6335de167ec707afb70b962f674489ec81", 0x67, r15}) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r16, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r9, r8}}, 0x18) 23:30:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d003000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:53 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = dup3(0xffffffffffffffff, r3, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000000)=0xe) 23:30:53 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d013000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d003800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:54 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000280)='$\x00'], &(0x7f00000004c0)=[&(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00']) 23:30:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r4, r4, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000e80db9cb459cf88e578a4b3fbbc01322870801475c7ec5c9b87c5762aabcefee16696e9c26", @ANYRES16=r6, @ANYBLOB="010000000000000000001d0000000c009900000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r11, 0xc05064a7, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x2, 0x5, 0x4, 0x0, 0x3}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100100000}, 0x42, &(0x7f00000003c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="d924c6bdfcb1cea17eec5aac3cac9db47297dd6920a34985998870d3634f83", @ANYRES16=r12, @ANYBLOB="c900000000d322b6b503000061ac"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4044012) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r14, 0x800442d4, &(0x7f0000000680)) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r12, 0x461, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4fb}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x20008000) ioctl$SOUND_MIXER_READ_RECMASK(r8, 0x80044dfd, &(0x7f0000000100)) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r6, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x154, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x67d}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc0}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xfff}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xf, 0xbe, "9f03980b4c12deba8c6628"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xea, 0xac, "53ae720d2957a43a6392009f03940e4d3c8281ca81fdcc4b4b95879e5c956db0a95853f68a1bb0aa9c74ecb73b47aac3e460d62a254fe652bb25b1c4761d5c01c177b8a08957ae8b40e3c76f8d5ee2044906aef4173549ddc91b1577054fe34bda637d4ce84e510f29a3daeab88d6fda170584ee40f31926779dc22e402e8a13390c3fdecd65e82a0716d73d26b427e26662ff7a35ef6f047e012b2600903a5248c78f9a9052bec66b8ff986cf42cbaf358c6b9d8a104233dd381b448ebcea672b23a0b2dcbf110d6c92b774c62b5f40a2cad034f6fe80b6377d8d14262235289203ccf7aac8"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a9b458ff5281"}]}, 0x154}, 0x1, 0x0, 0x0, 0x10}, 0x4004) r15 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x200, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r15, 0x8982, &(0x7f0000000500)={0x7, 'veth0_to_hsr\x00', {0x2}, 0x17e}) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d013800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:54 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0xfffffffffffffea4, 0xfa00, {0x0, r6, r5}}, 0x18) 23:30:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:54 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d004000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:54 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000ff0800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x8000000000007, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0xffffff96) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) kcmp(0x0, r4, 0x0, r5, r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:30:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d014000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:55 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) sendto$inet6(r5, &(0x7f0000000040)="33285f2eb560efaff48813aea4071ff12fb92939f80a7cb20a76d8edb3c6", 0x1e, 0x1, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @mcast1, 0xdd}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r4, 0x4122, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000200)=0xe) 23:30:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d014600000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:55 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$setflags(r0, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_crypto(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7d45e229306201a8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@getstat={0xe0, 0x15, 0x400, 0x70bd29, 0x25dfdbff, {{'lrw(serpent-generic)\x00'}, [], [], 0x2000, 0x400}, ["", "", ""]}, 0xe0}}, 0x850) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, [], 0x36}, 0x1}, {0xa, 0x0, 0x0, @local, 0x20}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 23:30:55 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d004800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000180), &(0x7f0000000240)=0x4) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r2) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0xfffd, 0x1, @mcast1, 0x8001}, r3}}, 0x48) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r7, 0x5}, &(0x7f0000000140)=0x8) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3}}, 0x18) 23:30:55 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000600000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d005000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:55 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000700000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d005800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:55 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x91480, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba7502f6c59e7f202738f6e3d2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027eccaf3f6db1c000100000000000000497400000000000000069e735ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000340)=""/252) sendmmsg(r3, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)="86695a361aedc8b7c4b983cb88ca", 0x1000e}], 0x1}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', r5}) sendto$packet(r2, &(0x7f00000000c0)="bedafa424abb2616d6a24bc227a393bd3b368df2c3cea8524934c80fb05bcdf2e157406c6d2f8fadafcbeea8f2c81db3e9879425f6ed435fd698f291da90b78bdcd7536382cafb0d2c3060b2f1abd49687fc5a6b309f4a653d9fdd358c96ef00b17e0a6811aea495701a425f2f71e1efecd333a8543dd42af183455ab2a6cde489cd9406096d8a2053c56054f63b8fff9a67073fc4db5798ea87bebd73b4f21624ac52de0b4147218414e44f76e67222348f62ad11212807b03060b4710a5b", 0xbf, 0x24008004, &(0x7f00000001c0)={0x11, 0x6, r6, 0x1, 0x56}, 0x14) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0x4c, 0x7, 0xff, "6a3432a36e6fe651024ece7aacf94051", "4663ddf4ae7550017194b21638bb5373a5bb2f808b07d7f8a0ae056a1585d9fa271c881b43f726212856cb68ff147e33146c68eaac8619"}, 0x4c, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x22) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r8, r7}}, 0x18) [ 999.498358][T14085] net_ratelimit: 34 callbacks suppressed [ 999.498369][T14085] dccp_invalid_packet: P.Data Offset(101) too large 23:30:55 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x0, 0x2}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) accept$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fcntl$dupfd(r8, 0x0, r1) dup(0xffffffffffffffff) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x20000, 0x0) readlinkat(r10, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=""/134, 0x86) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x6, 0x0, 0x2a, 0x7fff, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x0) setsockopt$PNPIPE_INITSTATE(r9, 0x113, 0x4, &(0x7f00000003c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r13, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:55 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 999.553375][T14085] dccp_invalid_packet: P.Data Offset(101) too large 23:30:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d006000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 999.653078][T14120] dccp_invalid_packet: P.Data Offset(101) too large 23:30:56 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 999.709497][T14120] dccp_invalid_packet: P.Data Offset(101) too large 23:30:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) recvfrom$inet6(r4, &(0x7f00000005c0)=""/4096, 0x1000, 0x40000000, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 999.880662][T14199] sg_write: 11 callbacks suppressed [ 999.880676][T14199] sg_write: data in/out 1610648826/24 bytes for SCSI command 0xff-- guessing data in; [ 999.880676][T14199] program syz-executor.4 not setting count and/or reply_len properly [ 999.937418][T14207] dccp_invalid_packet: P.Data Offset(101) too large [ 999.956027][T14207] dccp_invalid_packet: P.Data Offset(101) too large 23:30:56 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d006800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1000.135494][T14219] dccp_invalid_packet: P.Data Offset(101) too large 23:30:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x660, 0x318, 0x0, 0x410, 0x130, 0x318, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0xfffffffb, 0x6, 0x1, [0x9, 0x3, 0x693, 0xe0e, 0x630, 0x5, 0x890, 0x0, 0x8, 0x99, 0x1, 0x1, 0x9, 0x1, 0x6, 0x3f], 0x4}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x9, @ipv4=@broadcast, 0x4e21}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@multicast2, 0x24, 0x35, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x3f}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x5e, 0x3f, 0x7, 0x9, 0x7, @loopback, @empty, @local, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff], [0xffffffff, 0xff, 0x0, 0xffffffff], 0x1298, 0x2040}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv6=@empty, 0x8, 0x1e, 0xfffa}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {0x11}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="60004e0703000000000000004fd3dbb2586afe9f574a451adecb0000", @ANYRES16=r3, @ANYBLOB="04002abd7000ffdbdf250100000008003200c60000000a000900aaaaaaaaaa1b0000080032000100000008002b00040000000800310002000000"], 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40080) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x80, 0x0) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) [ 1000.181253][T14219] dccp_invalid_packet: P.Data Offset(101) too large [ 1000.217202][T14222] x_tables: duplicate underflow at hook 1 23:30:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x4, 0x7f, &(0x7f00000000c0)=0x800}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1000.232427][T14224] sg_write: data in/out 1744866554/24 bytes for SCSI command 0xff-- guessing data in; [ 1000.232427][T14224] program syz-executor.4 not setting count and/or reply_len properly 23:30:56 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000060800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d007000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1000.437936][T14333] dccp_invalid_packet: P.Data Offset(101) too large [ 1000.468950][T14333] dccp_invalid_packet: P.Data Offset(101) too large 23:30:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0xe) 23:30:56 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:57 executing program 3: r0 = getpgid(0x0) ptrace$setopts(0x4200, r0, 0x3, 0x19) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x65, 0x3, 0x1, 0x6}, 0x14) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) [ 1000.664404][T14341] sg_write: data in/out 1879084282/24 bytes for SCSI command 0xff-- guessing data in; [ 1000.664404][T14341] program syz-executor.4 not setting count and/or reply_len properly 23:30:57 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d007800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000140)=0x41) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast2, 0x4, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x2b}, @remote, 0xffffff00, 0xff, 0x5, 0x7, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x8, 0x40, 0x46, 0xffff, 0x362, 0x100, 'hsr0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0xfe01, 0x4}}}, {{@arp={@multicast1, @multicast2, 0xff000000, 0xffffffff, 0xa, 0xe, {@empty, {[0x101, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xff80, 0x5, 0x38, 0x8, 0x5, 0x5, 'macvlan0\x00', 'bond_slave_1\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, 0xf}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007f", 0x7}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000006a"], 0x1}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x2ba, &(0x7f0000000100)}], 0x492492492492805, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg$alg(r5, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="60a8a936c9c27ad7efe2c022590eda8d02f18f122ed7969db11d33ecd6a9334a3122a6583fb57481392fe639ecd4619ebcca99852699e7252d932640f9f26012e120208199e476fa79fdaea4699e2cd7af3987cd01ba7319eba6f2eea21eb1574007", 0x62}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1f8, 0x4000000}, {0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)="789253ae336499f61b9ebbcf00a696376b798b5f03c239b66241ccf7caeb0d9e819d43f19dac08680300219faeacdc82208451483f758cd226e96a30e516abcff59d75f9f6fc4cb9f03486d5cbf9de2ec1b03a21ccb9dcafd0a89936d46c84f2faf7ae13e6e9885012c1b326f1cb40", 0x6f}, {&(0x7f0000000440)="7d78adb949856d479399bdf2b92ba0ed8a2168ee1dfb1c0237500c7b580132f88d30ee07b1b742a476e816b7554054f73ebf707545855da77c84122bb20a5b1e5fb88228fbbdb815aefdc2911a5268658211cf8060592615a2237d74f09d43425119e0b7a95b0be03c374688123283a32478ae31dbf8384ff44c09826a5e202e8aba1ef8bc59663cdf9bbfcb349872ffde4841bbaeaa", 0x96}, {&(0x7f0000000500)="9b9e16c421d97fe807aab7b0586a7aef4d80712fc45a93c5dbc6d17b02a51bc8fbda", 0x22}, {&(0x7f0000000540)}, {&(0x7f00000007c0)="f6aca2f6c930514c612fdb68eff5170726fa9ef90e7925339dfe3ae0c255837d8d6c3c597730db0534a5827b7c402f3f4b56452b9393bb4bc6d8d3c0fd9687c8882a37c05b078f8ce8903d10a928bd1163043236eb5d5d74761986b2b9fa9cb50fc300ba", 0x64}, {&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="8e5a8dc556a7566f95ab0c10b9ab06f4d3c9c9b2c378f077e67740ddb4cefe45b1e8e0aaaa419e493def706b7dcbda1d683109d4faa034ecf1cdbd6fd6b340eb8931ecc6e30832ebd2477d8ba36057ed392ba7456da90922076d43486266491592db873c6ef24b3b814bdf1c7f01568fa3b7811797130d356b064789586ff5574fdfe0afe1011a279a24e15b519f3ac32a36d1f30d9d9050f253b167722b521e82c6f8938c7167a8fb10c32d82f4fb2870e7aacee218de39a1d50011aae7021a17edaa5f52dac0", 0xc7}], 0x7, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000ac0)="73e383d73db0db68a25e9eef05392b770a00147abca855158993a1a89d5b8da0cf8584a6ffd024082afdd015a88a5e15fc5cb44836a101efd29f7e8308658c946d87ab2bd4fd02e86587ea860c", 0x4d}, {&(0x7f0000000b40)="452f04a82fc33dbc6b7147894a0c89bba0a841c867d2682730c7855a6605f86e1a7e225d4550f500f45a3311b462a3b79e7fdda5e8fb9547385d115e55bc0dc15f85aa6eb3a90871409f0fe1", 0x4c}, {&(0x7f0000000bc0)="94cfe3091c54c164779835ea4295ce373322b5068b2e3991578d82b05e68505d9748f443b3f8b608cc25af078859f017a24805a2740f8b89fed50c11d517ef68f495e789324212d20b66db9512a07ed57461bdb9cb61583071b7f1523a2069ac7d4414f7631684cbd0e7de7ca4670167f5a6c0e25c4a366ef2881440e96f75ba8566ce8497dc4dfadfd036c7c586c5bf11987f346c5e07257589f0384c4387b6177dbea23ddfeaabb2cf9421466a3e134d3fc6dc545d85f008", 0xb9}, {&(0x7f0000000c80)="d6311203b5062c25d13773d0cdb9f946a63c5fbd6f2de3431a41cd069cc7f423ae88a19a652e4cac9c6497298505522ffa9f0eef680e46d64d3b9407a601e46406311f86bf84d77622552aeae6260e9e54924669633e1181535a4431cff5631007abc7d80b2dc2eaf37cfcf6002d40c39be8993c237a51272f853f3393708507f4c285975c10f20ec57b7cced2603c562667f376a4638833c4b48df1ef", 0x9d}], 0x4, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d80)="26e7a98a004a5c5f462f1efe3b66262186183fcf9ed25b034350334e9de8d664b4665f6b366d4e11d7352d93ed112761c431f0356d6f8df4b15d6e0d3407371f71f352633131156a577fc60eb858640d6c41c5a9f08b8730c29d190438ed9266bacaa30f5c8a0db61ba6e1798d885a605aa1e302c9008df5b28942ea66d53199980acb39e6b697c1e394e33d6586fc2583d5375f2ca35df0ba71aa4b3d7c6d2deb6a702ea96bcbee8980a6e592e756576d98e8601c010a0c7fdae925c36b62977abd770da436f38a50", 0xc9}, {&(0x7f0000000e80)="72fceb5b605278fd8c51dba258f70f2a1b876cf182e35cb1cf46f6e2ba60c26f83ee0f72701db3b0208745876da587851805892575aac7f2ed8c22a31301fa28c8be2d3c", 0x44}, {&(0x7f0000000f00)="f9e7979350a2f927d406088bd6280e722fe6401a60a5b760bfd89cbde275897e4ed32b03369a0a783f66f87803f6d7d26e0be2d14bad7dbfc63ea5bf2871ab13bc0faf762a61bb954bda8940428910a9", 0x50}, {&(0x7f0000000f80)="3247131ee850732b76a7a7a33a18cae2f0db3bb3832f746d5890282028a9c1da990d2a1ee74a0fdb5f22d2e44e53effe3455642074cde918569046ca3f76737ae224cc0ece303b459848cbc19c83325f72f7145ab819b560a04f9d14d4481e8c2fed4f9a1bb62c603257bb294618a709643f36ec85c76ef7013d8a5bf186edf5602179a632a331c188505588147b378fcbce58ddb6ed596a141d10c5aff91984c55609c1ffccb7e8fbed357c558fcaf9b9e58d077ef61fc9eb6e00146eea350a11e578d17f67089a7811dd1cd0f8c743510c6e6b33dc8eabfdf9389cf171c5788e8b695fbe", 0xe5}], 0x4, 0x0, 0x0, 0x40801}, {0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000010c0)="597fbad0b100aac65bc9df47986ce87698476d863849902a0e060f708618f3c811684671409ccf1cc1185595184fcf4a6b982c1b5246fbd11625477f8505688cd42a2f2d264d25c3d20b742f02faaba5c1e513071dceac53136ed1f90e3f158e9ef5d446a10fc1fbf181169d48ac81e1769284828c5ef9ca6186622dcf3ecb48d41a2aea4e6a1c8512c2bb1d2a4be51a9324f170209fef73bbc6b6bee7037e544effc249d4b0c181b6f925ccfb24904530f2e6c3371a7f75abad8afa", 0xbc}, {&(0x7f0000001180)="0a06be4bf0f20a244cc07812fa3c11ad6adc87fc9aee748bfaf43acea03ebe260c6d31dab7cb9d1d6d17ec4d11f80b00fc30f1e5d60cbb7bf98afd0e7ab7919b034810c47de59435e76c61141dab9abcb0b58154c1d93dd7d3d5cdf8c688b3cd8e2ef8064622f62c05b48c55e29b894f8ed28aa7ac6ab8a0c6f394876178e99a7cc82a", 0x83}, {&(0x7f0000001240)="116f6d7c2ae1572efb30c9476a7509b6668fafd37cd185153442bec3aa368632947553f74d879bdbff1b5042222449b3fa9fe91b192ad878e1b9abff5edc945eec81cbafafd9522b0394306949e71303a5fb634f52382e980c6fb12962542db6b9e7ba34584ae81e5afb92af071878a975ff5f968a4144582a11e0df4ca913236a713a9ef1c532042afdbaf78b86bae8f447afa7b2ff00ef9c3226100f2b2e5c77c5e18209b5052f0a8c7fe9231e3421dfbb2e32c7e66796be6209bd30bd9cbf", 0xc0}, {&(0x7f0000001300)="75e08dd9737076290ac607e346d10335fcda4b4a27bd80358234e95c5b514eb5f0a6c5c00ad9c03cf961d594f11ff065a2a5fe1b5b2a15b8ed9190d802ee98d6e181bff5596730b1197c51c6622ff88088b23ee9c33db78949013b260a612cea78b3c36af2feabda0531306fcfc2be845a06be0db4cfc72cb8889365e68216610271af4328482c25442b7a2edb59bd97f0f72f5e57948f695a98760d612968ce6ec3823b2943b131973d6972fc620cfa29", 0xb1}, {&(0x7f00000013c0)="2833e99a87844db9886a71f0e0ac2889f0da0c887264ce35721d35d2c1011f9570d072d1d42176d424047a5a7162d0294bd5b7c64b02804bcd4cea80a739c89d09ae5edb7eac6cf2e4e36171285893e18b270493fca4f3f5", 0x58}, {&(0x7f0000001440)="545effda5297f77b7de756b7faee6a1dc3ae0fd5885bd4275cbc7ecfd7d0e74c43efbe46047e30e52d6dd418a0320f8d0751efb7f7265b2646a9d3679d937de723d3f0fb7686f56b79c2ddf9365a981764e19ccfe98480ee6d0b9dc31463e13502b8717a4c1dbf8cd9d30c775365fcc87310afe95a97035e9ab66035fd", 0x7d}], 0x6, &(0x7f0000001540)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @assoc={0x18, 0x117, 0x4, 0x6e}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8b}], 0x90, 0x4044080}, {0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000001640)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x800}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x110, 0x117, 0x2, 0xf9, "2c22f3e9e5829b534b990500db1bbb35797a2067c9adaa916836bb86e1289f2f3604b4061fd8f122e6f704400ee296241668e342f7fb699ceb0c9c07e3dfa6b7175f28791c462432df7d94b172086d109fee3619c576ad0fc5248efb376ce7ac2c4e96c8cf4ca5c4760e0aafcf518b093a80ed3ebfcf37574db58864e476666f26a53c2e5c0361c96fe7fd1e7540c9c140075ece133f2de7f7a704b570a2f4fa1e66b29625a87d318426ddfb863ba9a1697355616b180fcb4484adbc4b2b473937ebb65c2a8bb57f2c8f5e74de70a169f86a38cc4fec00bc139b1211a8d90ff6ac8fa0db51f00eaa3a951b4607a70c3c935fc5f6100a06bd56"}, @iv={0x18}, @iv={0x68, 0x117, 0x2, 0x4f, "11b483ca8a57fdb94eade897cfca37617cd486df8bdadcb1faabdf296e5b7491c996a2e2eed68d2fe5bbabe7ec1e1e91122c9911af2f25294a4a1ae19ec8932f50ad81d9d423a424f38dc518257948"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x208, 0x24000805}], 0x6, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r2}}, 0x18) 23:30:57 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1001.005735][T14461] sg_write: data in/out 2013302010/24 bytes for SCSI command 0xff-- guessing data in; [ 1001.005735][T14461] program syz-executor.4 not setting count and/or reply_len properly [ 1001.048895][T14462] x_tables: duplicate underflow at hook 1 23:30:57 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d008800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000000)=0x8) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$alg(r2, 0x0, 0x0, 0x800) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f00000005c0)="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", 0x1000}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) 23:30:57 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d009000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000040)=0xe) 23:30:57 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d009800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000004c0)={0x1, &(0x7f0000000280)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000500)={r8, 0xa}) ioctl$DRM_IOCTL_RM_CTX(r7, 0xc0086421, &(0x7f0000000100)={r8, 0x2}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f0000000000)={r8, 0x1}) 23:30:58 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000680800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00a000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x400000000003f, 0x204002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000), &(0x7f0000000280), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), 0x4000000000000118, 0x0, 0x5}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:30:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0xa, 0xab) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:58 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00a800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x70, @remote, 0x40}}, [0x10ce, 0x1, 0x1, 0x80000001, 0xa59e, 0x1f, 0x3ff, 0x8, 0x400, 0x16400000, 0x6, 0x4, 0x800, 0x200, 0x47]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={r6, 0x8d, 0x4, 0x81}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0xa, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x27}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "b1"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x24054818) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:30:58 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000740800000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00b000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x105680) socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x7, 0x10002) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000080)=0xfffffffffffffe31) 23:30:58 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:58 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00b800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x1, 0x33) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:59 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00c000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0x9}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, r5, 0x4}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0xffffffffffffff1c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_SET_FPU(r9, 0x41a0ae8d, &(0x7f0000000340)={[], 0x6, 0x7ff, 0xff, 0x0, 0x200, 0x1, 0xf000, [], 0x10d2}) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) flistxattr(r10, &(0x7f00000000c0)=""/32, 0x20) 23:30:59 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000003f00000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:30:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00c800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:59 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r1, 0x17}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000000)={0xc, @multicast1, 0x4e24, 0x2, 'nq\x00', 0x21, 0xffffffff, 0x73}, 0x2c) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:30:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00d000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:30:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x8e, 0x49, 0x1, 'queue0\x00', 0x3}) r3 = fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = getpid() r5 = inotify_init1(0x0) r6 = dup2(r5, r5) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000017c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r8 = gettid() sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESDEC=r8]], 0x8}}, 0x20004850) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000600)=0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) kcmp(r10, r8, 0x0, 0xffffffffffffffff, r11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x13, 0x200, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r8, r7, 0x0, 0xd, &(0x7f0000000900)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', r12}, 0x5) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r12}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r12}, 0x30) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000000240)={r16}, 0x8) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = fcntl$dupfd(r17, 0x0, r17) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r18, 0xb704, &(0x7f0000000280)=0x0) fchown(r14, r19, 0xffffffffffffffff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r12}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r13, 0x0, 0x4, &(0x7f0000000180)='em1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, r6, 0x0, 0x0, 0x0, r12}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000)='keyringnodev[.eth0:\x00', r12}, 0x30) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xe) 23:30:59 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1003.470299][T15191] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20004 23:30:59 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:30:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00d800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1003.567042][T15206] IPVS: set_ctl: invalid protocol: 12 4.0.0.0:20004 23:30:59 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000300000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) timer_create(0x6, &(0x7f0000000100)={0x0, 0x2c, 0x1, @tid=r3}, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x35) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) 23:31:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d040000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:00 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00e000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1003.935244][T15321] sg_write: data in/out 298234/24 bytes for SCSI command 0xff-- guessing data in; [ 1003.935244][T15321] program syz-executor.2 not setting count and/or reply_len properly 23:31:00 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00e800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f00000001c0)) r1 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x80000001, 0x8100) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x58, 0x13, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c811}, 0x4004) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000180)={0x7, 0x5, 0x8001, 0x6, 0x6, 0x1f, 0x3f}) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd41d5f4f529fb9e3}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000040}, 0x80) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x98001}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x8, 0x70bd2c, 0x25dffbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000200)=""/124) write(r0, 0x0, 0x0) write$ppp(r2, &(0x7f0000000600)="58d8f10745efbf3f839b0a2e4fcb0e99110098aa62b1ac28cfa335a21a715ee6526a1a7cefa2fc87ab08a60551182060f101622dad11ed5ae0cab3c00dc5a9c80ae38399e1c53ae2475087b6ba332242861349484ad95f69a5b5d240a6fdd61d6a9667756723c6ae8fb0b8760d73f6f1fb5e68b79f40ae14119fbe8928bd7d2183c755e2790174d13d56dd03cfdc5b12abbe42528da5c80fc83fd49427038e8daace33d1a397908ff74cebdaa9d9b43948a30c597c68bc6ab9c81b98987c203d7ffd7aa65f76f7db4065b40296948b785473d323", 0xd4) 23:31:00 executing program 2 (fault-call:7 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:00 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000600000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00f000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x80000000000000, 0x480000) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:00 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1004.541771][T15454] net_ratelimit: 40 callbacks suppressed [ 1004.541782][T15454] dccp_invalid_packet: P.Data Offset(101) too large 23:31:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d00f800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1004.596616][T15454] dccp_invalid_packet: P.Data Offset(101) too large 23:31:01 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x16, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r4, 0xf}}, 0x10) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) r11 = clone3(&(0x7f0000001780)={0x800, &(0x7f0000000540), &(0x7f00000015c0), &(0x7f0000001600), {0x1a}, &(0x7f0000001640)=""/167, 0xa7, &(0x7f0000001700), &(0x7f0000001740)=[r9, r10, 0xffffffffffffffff], 0x3}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x100, 0x8, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = mq_open(&(0x7f0000001940)='\x00', 0x80, 0x0, &(0x7f0000001980)={0x5, 0x4, 0x401, 0x75e6}) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r14, 0x84, 0x11, &(0x7f0000000240)={r16}, 0x8) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) r18 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r18, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r17, 0x84, 0x11, &(0x7f0000000240)={r19}, 0x8) r20 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r20, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r21 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000019c0), 0xc) r22 = io_uring_setup(0x5f9, &(0x7f0000001a00)={0x0, 0x0, 0x2, 0x2, 0x115}) r23 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001ac0)={&(0x7f0000001a80)='./file0\x00', 0x0, 0x8}, 0x10) r24 = socket$inet6_sctp(0xa, 0x5, 0x84) r25 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r25, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r24, 0x84, 0x11, &(0x7f0000000240)={r26}, 0x8) r27 = syz_open_dev$mouse(&(0x7f0000001b00)='/dev/input/mouse#\x00', 0x7fffffff, 0x181000) r28 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) r29 = getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002300)=0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r33 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r31, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r35 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r35, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r36) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r38 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r38, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r33, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r34, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r32, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r36, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r37, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r39, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) r40 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r40, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r41 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r41, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r42 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r43 = socket$inet6_sctp(0xa, 0x5, 0x84) r44 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r44, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r43, 0x84, 0x11, &(0x7f0000000240)={r45}, 0x8) r46 = socket$inet6_sctp(0xa, 0x5, 0x84) r47 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r47, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r46, 0x84, 0x11, &(0x7f0000000240)={r48}, 0x8) r49 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r49, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r50 = socket$inet6_tcp(0xa, 0x1, 0x0) r51 = fcntl$dupfd(r50, 0x0, r50) ioctl$PERF_EVENT_IOC_ENABLE(r51, 0x8912, 0x400200) r52 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r52, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) getsockname(r52, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r52, 0x8904, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x218, 0x401}, 0x40, 0x0, 0x3}, r53, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r51, 0xc0286405, &(0x7f0000002800)={0xfffffff7, 0xd05, {r53}, {0xee01}, 0xfffffffffffffffa, 0x8}) r55 = socket$inet6_tcp(0xa, 0x1, 0x0) r56 = fcntl$dupfd(r55, 0x0, r55) ioctl$PERF_EVENT_IOC_ENABLE(r56, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_CLIENT(r56, 0xc0286405, &(0x7f0000002840)={0x800, 0x7, {}, {0xee01}, 0x5, 0x3}) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r60 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r58, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r62 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r62, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r63) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r65 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r65, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r60, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r61, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r59, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r63, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r64, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r66, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) r67 = getpgrp(0x0) r68 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r68, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) setuid(r69) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r72 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r70, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r74 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r74, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r75) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r77 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r77, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r72, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r73, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r71, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r75, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r76, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r78, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) r79 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002880)='/dev/hwrng\x00', 0x40, 0x0) r80 = socket$inet6_sctp(0xa, 0x5, 0x84) r81 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r81, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r80, 0x84, 0x11, &(0x7f0000000240)={r82}, 0x8) r83 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r83, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) setuid(r84) sendmmsg$unix(r1, &(0x7f00000029c0)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000140)}, {&(0x7f0000000180)="adecdfcbe68ec3dfdcdb68de477f113d16eeb9b36540524d6a360814c102e029f9f261495a3f0b11f281d8f31979a972102b26a299393ff140ab9a30f5a359238fb7d61ccd7978cb04735c4f87348a44d3c8701d6b7f88df39330d", 0x5b}, {&(0x7f0000000280)="11db905610", 0x5}, {&(0x7f0000000340)="be1d", 0x2}, {&(0x7f0000000380)="acbe2abd9098ef290173c4876866e03a520e6afd9721c7e5604f1f955296beae1284abf152452b6c1866d5314459460f51db452c51794e7ff43b462bcd069fc6ef9fb3d526df97af2e315e968aed9bb8bad36f46e2c69f3a3b9021c697aa1c22f2b9b2f3c3ad2c1f55d44e22c4ce76727dc44e15a7a3d6457eb66ee58a041f55f518495118056ce943", 0x89}, {&(0x7f0000000440)="72a787afd4325a882620019dae78c7f9acf26742a75114e2d57842b3fa859c7720caa096e36ef7c8566e392ecf3e1ba261eb00426791d7e6641bc1f284315595e480e37c18be531405bf606e616ed628bd04773542f026772140ee", 0x5b}], 0x7, &(0x7f0000002a80)=ANY=[@ANYBLOB="1c0000000000000074ed000002000000e2b81c2caa6a747b", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r5, @ANYRES32, @ANYRES32=r17, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r22, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r27, @ANYRES32=r28, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x10}, {&(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000001c80)="c8698df6bea98475da6f51e811cee3375111fcdc800bb79429c1491244a86f4129fe100f7192e99e72b34d0e48f6041f18f31ff613573e6e981de7e760b3d559ffc80a32c752bfc00a733f8f85c7f1f1d395e45598c6996f4f5c99666b0ef0561c6d591d6f097e131a7470337cf130c94db7f445d6be6013ace6b3484c3a91c2a1524802ca7ec2d3c25296c48f110ce4c69fb49d912f", 0x96}, {&(0x7f0000001d40)="c7e81b4da1985c8b6e6c43ea97a7f1b81130b2e47c461a020ef92e898bf2d25bb385ae4fafcdc11253e5d232ed082643f876c15a8cdc90574fc97daa335ea97999269f9433acf7d57c16e814c42dce388900c4dfce2eeee335f9d19662d6f932649e4479838c96d5730f84b3dc1168d3fea02c133a6a8b2a69cb2a4a041f0d26fb3f73392d186d9755355d16", 0x8c}, {&(0x7f0000001e00)="beb35deb9ffccb652a44d017a13163f91f77893ca7268f4389011ba237ded8f542fb73a7c9980ac40b31ed08b9d28970ce18633752464debf21ac2ba2aaa23f5ed49ec71be9efbfbea7847f7dd52f0c87d56475e82ba9ba7faf92a68a49a9a5347c8639aef681ab3703764d0d858b263519054017567ad21c410d8427099d2f757d05b5b312447cd0f5274da30ad98baea876e8f4eb6886fff784005b92b8064c45f5cc4241526d99f61", 0xaa}, {&(0x7f0000001ec0)="55ed87e95fee8e0a7bccf5a0871c123f1242016851e9ead4e5fa2269c6e741698eee4c809b53f9bb41042e2e566d9cc5496ca3d0527d2016eecf6433e089a44c5ce0df9db589a11f78b91766233737b1b9d04d70b4689c3b9dc97f15284ecdd5734e43474bebfd867ba00203da1cbc5530ed0064069c4db240a4cdc03e9b8170f6b7898a64012ab3dc2ed22e9828abb13d4763df20007406367e9efdeff742c5e23e4cb6365b30192de025fafb88b88ac7f1637ccb648f5587d9b49a1aef3dc0e30833702eb0c44ec4c2197b7b6a", 0xce}, {&(0x7f0000001fc0)="18bdd79120d9c9675981b6a86670080a092154f136c76a217a633a696fe3e3aec0b22f5abaea807e80d527f3be17c41a3f2d4a77a7a8ffb5d7c82be76429f49028b0d980237ea0176092945524ae42f652cfc9506c368b6c418591d509d2d9117fa75eb14d3776015b063c2884f728b81cc8575601cdcfe4afe2b719b3bb91548324d81477e42efc0810662fa0e26a0f634ae69653fcd0e7", 0x98}, {&(0x7f0000002080)="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", 0xfc}, {&(0x7f0000002180)="978242dff4ad11cb9bcf8127e2ca0afe65e46d7bf1814fc1212041ca0cd0e398daa49971fc8ccffa73e3236003a0a30b5aca740fab3f61fd4111cdb18d1e34ce7b7330742c801ebb22c6bccfd86b9eb93e420121801c0ed448eb11a976cde796e58688685bd7ed25177653ba4c5ab28aa150372c1ed42263b0300f8a568b2bb76774143461460fe907d6afcfa99eb5513b93bb28735a77b52dc7717c22468a1860643aeb142737f30a", 0xa9}, {&(0x7f0000002240)="c47ed0c094bf8f1d46ba91deb6a6", 0xe}], 0x8, &(0x7f0000002340)=[@cred={{0x1c, 0x1, 0x2, {r29, r30, r39}}}], 0x20, 0x4004890}, {&(0x7f0000002380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{&(0x7f0000002400)="afa5071c52caa82b1b2f02453b7cf1f21491449ec8764794d9f1", 0x1a}, {&(0x7f0000002440)="88a2ae3de9514531e0e199266ebd0a519342742dbb1494ca8f25053bf26f32577dbcd110ab439a11b391ae409f9ad4aeb26e01d271f7e1d86e8554d2a81592745ac11981d782de5ab646220ccbf526664360e99d4cbe56b96d6e22a1", 0x5c}, {&(0x7f00000024c0)="e6d81484b64dde91cfcbfb434669bca3271cfff3919b8eaf4c117a351f6d6cedf344de28bc779356622c56784c9f1f443c4aa748af86aebdc4fecab3e88eb618e0cb7802a658880907abcde3bac7e3cf35ab867ce0c966fcd636d6bb324446e289603485ea882ce6d3af1a0fe97523b1a2d71f8a6eba6bb1534b69151e4e63b3464c249bf66777682304db90a2586ab0c6b3c08f2a69c3aa8f440601a200", 0x9e}, {&(0x7f0000002580)="ae1dc873c50817b211efa4a9d661e9b52855be24dd80d27d72fd81141473d169e5b9c836c40d776a7396acdebcdf1d3d0f51c78d04c0626528f706ce367340050492330b3d0786e64473b8c7fbb53fc31e8518a77c5c344afea1b057b08e04d6c28516a52284f60ae8cac77b3ca15116db16a9440f901edd0100b221c798276a6cf9db51f77ed0064e598d48781c0fd0daf19991", 0x94}, {&(0x7f0000002640)="c00e3a4f596f221be347b6a71df783c2a8fbae425f5f8650333705bbc366b1c49ab74b796bb239fd52f1d53ac4078306665a2c74536dfc2cd17d9867d45101fc8c5b691e82049a54261eb172f95e9f0634d583d438f0372d9eb41454c353a5dcdd0ddccb951d9c81b98a833f0e657ede39628e3876ea32dbf69a5100953eb591b6ea6918cc1da5b592bc1020159a543ba8c06deb99ae26d6981683ef0cfdb243c124255bed819ade8c", 0xa9}, {&(0x7f0000002700)='m', 0x1}, {&(0x7f0000002740)="2c0d531335d17bafbcf6f7a7c44fdcd0fd2ed8", 0x13}], 0x7, &(0x7f00000028c0)=[@rights={{0x28, 0x1, 0x1, [r40, r41, r2, r42, r43, r46]}}, @rights={{0x24, 0x1, 0x1, [r0, r3, r3, r49, r5]}}, @cred={{0x1c, 0x1, 0x2, {r54, r57, r66}}}, @cred={{0x1c, 0x1, 0x2, {r67, r69, r78}}}, @rights={{0x24, 0x1, 0x1, [r79, r80, r6, r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r84, 0xffffffffffffffff}}}], 0xd8, 0x10}], 0x3, 0x20000001) r85 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r85, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r8, r7}}, 0x18) 23:31:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x9, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xe76, 0x801) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) write$tun(r1, &(0x7f0000000080)={@val={0x0, 0x4305}, @val={0x2, 0x0, 0x6, 0x5bfc, 0x3ee4, 0x7}, @x25={0x1, 0xac, 0x5, "4d5bd57f10b65003976783545dd03754f148675026339de0f22c79ae3ad56dd88bc513728adbe36f73e6e0cf57c102bec9594a82d1dab911627ac99a519613200c808b21745ff99d322de7f5fe6522face3185096b96ac92ce46fd5cea1b813bfebfe36762a05a74d4b8042381cbd1e6d41b6ea47b9713583848ea90777953c649d0f1a6fd51ee9ae537a31c6ce4332b8d0cb39bb03a2cb33b336b3b333602f93d29c482d605a4d00aa7b1c4cb292a7994907f3f098d602164cc42740cf27329fb6439c435ae920a8bec0c4f5cbc07a57e4c38cd4e1160d55307c1a396d3fd1ddbe8723de17e9485c02e7bf22da539200bbb456a8b5fefebb0ea"}}, 0x10b) [ 1004.812082][T15567] dccp_invalid_packet: P.Data Offset(101) too large [ 1004.845238][T15567] dccp_invalid_packet: P.Data Offset(101) too large 23:31:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020200000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) timerfd_gettime(r5, &(0x7f0000000000)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:01 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1005.101499][T15775] sg_write: data in/out 33721594/24 bytes for SCSI command 0xff-- guessing data in; [ 1005.101499][T15775] program syz-executor.4 not setting count and/or reply_len properly [ 1005.115440][T15785] dccp_invalid_packet: P.Data Offset(101) too large 23:31:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa02, {0x0, r3, r2}}, 0x18) 23:31:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x7, 0x9, 0x7, 0x1f, 0x0, 0x78, 0x804, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x1, 0x9, 0x8, 0x7, 0xffffffff, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400204) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000000)='sync\x00', 0x0, 0x0) [ 1005.183165][T15785] dccp_invalid_packet: P.Data Offset(101) too large 23:31:01 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x400}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'geneve0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="450000000200000005000000008000218100000001010000f6230000b1f300000100000006000000149d898624f8161482a507de36b499afd050b544949d4f71f2aa34565bda648139d1c24df59a274f5c0f4c4050309f82f17f196206d886f8ccf3baa2a4d5a6e43dc5ce8084dbda8ee3caec83ae879b4586741fb0655f1dfb122ed45a0c2676655da96d06da601aae54ee9fbadf67df17e06b2cd020c3a03293b21b1a9f77a0c93c5758eb185dc963af6b48a8faa625b03af691fe730ea11e1b82978c"]}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r1, &(0x7f00000000c0)={0x20000015}) 23:31:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020300000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1005.482132][T15957] dccp_invalid_packet: P.Data Offset(101) too large [ 1005.515236][T15939] sg_write: data in/out 50498810/24 bytes for SCSI command 0xff-- guessing data in; [ 1005.515236][T15939] program syz-executor.4 not setting count and/or reply_len properly [ 1005.532969][T15957] dccp_invalid_packet: P.Data Offset(101) too large 23:31:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x7) 23:31:01 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:01 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000080)={0xc0000000000, 0x3000}) 23:31:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020400000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1005.804514][T16034] dccp_invalid_packet: P.Data Offset(101) too large [ 1005.833830][T16034] dccp_invalid_packet: P.Data Offset(101) too large 23:31:02 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1005.911505][T16134] sg_write: data in/out 67276026/24 bytes for SCSI command 0xff-- guessing data in; [ 1005.911505][T16134] program syz-executor.4 not setting count and/or reply_len properly 23:31:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x20000098) 23:31:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x6, 0x5, 0x80000001, 0x80000000, 'syz1\x00', 0x4349}) write(r0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:31:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e20, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, r4, 0xfffffffd}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 23:31:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020500000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x5) write(r0, 0x0, 0x0) 23:31:02 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1006.420470][T16277] sg_write: data in/out 84053242/24 bytes for SCSI command 0xff-- guessing data in; [ 1006.420470][T16277] program syz-executor.4 not setting count and/or reply_len properly 23:31:02 executing program 0: ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x20300, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2, 0x7, 0x10, "28dc2aea12270866b51b9b90860364443ec668eebe66e16b419d6cb8741fd02a28d7aec0cca0fef00b23f79813469ffb4e2e26df2ce807588de59272628a6db8", "0f7418477ff047fc487562c76af617ac1a8592bcfa1f25cbfc41f7bcf61d882b8aeba9a4e293c108773626209631d16261e17acf332642cb670b3e11d9048999", "a52b5263d09b6188cf7e3cbc585420eb24caefd91556b2084a7ac07ff46b76c3", [0x8]}) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f00000000c0)={0x8, 0x2}, 0xc) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f0000000080)) write(r0, 0x0, 0x0) 23:31:02 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x18, "c05aee4d60cc1bfda6ee2df01af924b2c5818c299c9a2749"}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x1ff, 0x2, 0x200, 0x0, 0x1, 0xffff, 0x1ff, 0x7, r7}, &(0x7f0000000140)=0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_batadv\x00', 0x3}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCGBITKEY(r7, 0x80404521, &(0x7f00000000c0)=""/98) 23:31:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020600000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000020ffc)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000022000)=0x1, 0x4) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:03 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:03 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1006.901365][T16478] sg_write: data in/out 100830458/24 bytes for SCSI command 0xff-- guessing data in; [ 1006.901365][T16478] program syz-executor.4 not setting count and/or reply_len properly 23:31:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) fcntl$getownex(r2, 0x10, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sysfs$2(0x2, 0x7, &(0x7f0000000140)=""/155) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty, 0xbc92}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) 23:31:03 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x230080) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x10}, 0x10) write(r0, 0x0, 0x0) 23:31:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020700000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:03 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000080)={0x1, 0x6780364b, 0x7f, 0x4, 0x3f}) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$GETVAL(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000001c0)=""/214) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffe, 0x80000001, 0x1000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x52d9, 0x81, 0x1, 0x40, r2}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f00000002c0)=0xca) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:03 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000000)='./file0\x00', r3, r4, 0x1000) write(r0, 0x0, 0x0) [ 1007.326575][T16761] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1007.326575][T16761] program syz-executor.5 not setting count and/or reply_len properly [ 1007.358310][T16767] sg_write: data in/out 117607674/24 bytes for SCSI command 0xff-- guessing data in; [ 1007.358310][T16767] program syz-executor.4 not setting count and/or reply_len properly 23:31:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba7502f6c59e7f202738f6e3d2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027eccaf3f6db1c000100000000000000497400000000000000069e735ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) sendmmsg(r3, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)="86695a361aedc8b7c4b983cb88ca", 0x1000e}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={r8}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, [], 0x3c}, @in=@multicast2, 0x4e21, 0xfef8, 0x4e20, 0x8000, 0xa, 0x20, 0x80, 0x8, r5, r9}, {0x5, 0xffffffffffffffe0, 0x9, 0x9, 0x0, 0x8, 0xbd0, 0x7fff}, {0x36, 0x9059, 0x3ff, 0x2}, 0x81, 0x0, 0x2, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4}, 0x2, @in=@remote, 0x3503, 0x2, 0x2, 0x80, 0x7, 0x6, 0x80f3}}, 0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r10}}, 0x48) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r10, r2}}, 0x18) 23:31:03 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:03 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:03 executing program 2: ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) r2 = dup2(r1, r0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r3, 0x3da31000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000180)}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) capget(&(0x7f0000000100)={0x20080522, r8}, &(0x7f0000000140)={0x4, 0x5, 0x5, 0x6, 0x7, 0x2}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000280)={0x2, 0x9c84}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000340), r7}}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r7, r6}}, 0x18) 23:31:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r5 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x80000) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="16000000b4ed87351d5259839ea28560335469ba5a48a2d675e76a434adc0d8c0c35e10571a35408e55b3ef014e715de8500d3dc8710bba179827c4e79eca7ae221f4c0492a3bc79fe073bb50b5efb87399d249ed04fe9e42de4a85e"], &(0x7f0000000200)=0x41) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000240)={r7, 0x7}, 0x8) 23:31:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0x1, 0x4, 0x7b4}) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x20180, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f00000000c0)={0x0, 0x4, 0xffc00000, 0x200, 0x7fff, 0x3, 0x0, 0x4, 0x1000}) 23:31:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x207171ea5c, 0x2a102) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_setup(0x400045, &(0x7f0000000000)=0x0) io_destroy(r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=""/12, 0xc, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r2, 0x4) write(r0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) [ 1007.749363][T16841] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1007.749363][T16841] program syz-executor.5 not setting count and/or reply_len properly 23:31:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020900000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1007.887233][T16885] sg_write: data in/out 151162106/24 bytes for SCSI command 0xff-- guessing data in; [ 1007.887233][T16885] program syz-executor.4 not setting count and/or reply_len properly 23:31:04 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e1e, 0x4, @empty}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000000c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {0x11}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040d0}, 0x4000080) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x111000, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f00000003c0)) [ 1007.993569][T16918] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1007.993569][T16918] program syz-executor.5 not setting count and/or reply_len properly 23:31:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020d00000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xc66, 0x8000) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="d36b3097eeb1b76846c051281ab3fda1"}, {0xa, 0x0, 0x0, @empty}, r4, 0x3f}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000240)={r10}, 0x8) r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, r8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r11, 0x80045700, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r3}}, 0x18) 23:31:04 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000868000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = timerfd_create(0x6, 0x40000) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x99b890f12f7648f6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:04 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:04 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d022300000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RAUTH(r5, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x40, 0x4}}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x2}, 0x16, 0x3) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) socket$packet(0x11, 0x3, 0x300) 23:31:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:04 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff0200000000000000000000000000010000000065000000087a000000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x807, 0x7aa03) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='GPLwlan1keyring#wlan1em0ppp0%nodev{em1ppp1)wlan0\\selinux\'-bdevselinuxsystem)}wlan1}\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) socket$xdp(0x2c, 0x3, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80202, 0x0) 23:31:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d022900000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000140057a3596e2257910000fdffffff010100000000200004"]) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = open(&(0x7f0000000000)='./file0\x00', 0x10200, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x13f, 0x4}}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = getpgid(r9) sched_getaffinity(r10, 0x8, &(0x7f0000000180)) ioctl$EVIOCGUNIQ(r8, 0x80404508, &(0x7f0000000340)=""/137) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r2}}, 0x18) 23:31:05 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500000008ac010000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pause() sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x36}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x14, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfffffffb}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004890}, 0x404c0d1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:05 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x80, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r4, 0x80184153, &(0x7f0000000500)={0x0, &(0x7f00000000c0)=[&(0x7f0000000180)="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", &(0x7f0000000280)="0db7ed1593b829f2a853fac20cd3ba79226f989b9009ccbf26483d1cda42cfe10ed40a58fb43150c025c1b86e8773060847295a77c6bbf19ad1bec9847db6dfbad46f2c1356585489d2618346ecf6b8f7456d7c03c600e35f54ae2567ac7cd7934280d9466f279cd4cb40ef510258bb587331bcee0248adaff5ae54bd9a923f9be7791c90ad6b335f87f5c93919fdbfdba491d7663926352d9aa8a11f362ea1af9dd8291764e7918edd5eb320550da1d42209ca6585f205fac1632ad2b581b0898a8", &(0x7f0000000380)="0918dd650178832cdebfbf2d9fb75f9802802f85defb109b3c896c83119abe68e567fd39c9b9c4826459e68481ce419126ff4489939f634ac807be54e049e7f0a40529111f50e2562d1937f100c76af573e167ec36d2222915dcaf87d968f355409b6fa9375502fe68e7b390367c83c61c2e71257ae07c206d86", &(0x7f0000000400)="64cb3eb0e7f6860fe43abbeb3246702b2e60bcbf1a10aec1ba615e6c9eca42fe70a3344c293858ca0356cab2c7f8d69543719e495bcc6d67ff16f017990a40694b65ce43dbaec7fe9e26bf12bee0c91cc3e7ae016d4cc3150896d96391eb063b72a1c8d9e6d0312c08517df3f3a87a99cc356516cee27d8460eab5f2e7d035fb0d8abe5129c87d04e2ece600f8848f5937cfca06c12d9a3ab6377058f00c3586f8b5b8826d2d9ce7e88cc4815ef9595bc993ce9303b3ac83310f8ddb3bea6a54392e2746cfc423e7833ae8b181479535f13fd02f24"]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x8001) write(r1, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000580)='/dev/nvme-fabrics\x00', 0x20000, 0x0) ioctl$KVM_ENABLE_CAP(r7, 0x4068aea3, &(0x7f00000005c0)={0x81, 0x0, [0x0, 0x81, 0x2, 0x3ff]}) 23:31:05 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x20a002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x8, 0x1, 0x0, 0x0, "e038867278f1047cf5e52eac6284375c922bb5ab2f219d16f50a038b63e9879c7c1737c1efe954f887436269892791e49a5617af0ba78122025278cc52368ec0", "972f6720f19bfe16b92e373898f420ebe13c727835212f51a7c548e897fd9b2b", [0x7, 0x7]}) timerfd_gettime(r1, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="c500000016442a216010379a069d211aae0004dd1a86c6760d0ed4ad560b04375775cd52b4832d570abbc53a5b5e87e13249cbb55fe315ad3a46e80a8af7880f27e2599196cf391b4ad21e3507c158214a4c6b59f2640c2f4f5ca501c3b2b3ed506ed83ef910bf559a5f77c1d4444f61fe9f739d07f795d5eed43dce8410c9db2694863d25ed1d44a9e8e1700c0414d0cca4375fcd9cd6f2542166f7570b298d5ccec6e218624c77af862b0a44d7000e0ee57d545c0b3df99dd83add8d887ee2143c35b2a656fa9f8f"], &(0x7f0000000000)=0xcd) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000240)=0x84) 23:31:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d023000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d024800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:05 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xffff, 0x200000) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x62, 0x2, 0xdc, "11380b47bd2ef6445871593c4ce016e1", "63a657fd23dd98a2a37d567ac3215691318c6070bfdec8fb351b3bad5d31eb900b94d60ab1a258656595f25af6e9d1f86e174c89782cb4b21a1623f987464b7fb9b2bbba73730531ac818e7cac"}, 0x62, 0x2) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x400501) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000080)={0x0, @adiantum}) r7 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r7, 0x0, 0x0) 23:31:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd76, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x34, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x6}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000000}, 0x8080) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r2}}, 0x18) 23:31:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x24000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0xefa6, 0x800, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:05 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:05 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d024c00000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1009.595044][T17605] net_ratelimit: 34 callbacks suppressed [ 1009.595055][T17605] dccp_invalid_packet: P.Data Offset(101) too large [ 1009.640586][T17605] dccp_invalid_packet: P.Data Offset(101) too large 23:31:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, r3}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) process_vm_readv(0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/196, 0xc4}, {&(0x7f0000000280)=""/223, 0xdf}], 0x2, &(0x7f0000000400)=[{&(0x7f0000000380)=""/96, 0x60}, {&(0x7f00000000c0)=""/30, 0x1e}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x5000, 0x4) 23:31:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d026000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @empty, 0xffffffff}, {0xa, 0x0, 0x0, @mcast1, 0x2}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r5 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='.selinux)GPL\x00', 0xfffffffffffffff8) keyctl$clear(0x7, r5) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 23:31:06 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r1) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r2) r3 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r3) r4 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r4) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r5) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/sg#\x00', r5) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r6) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='/dev/sg#\x00', 0xfffffffffffffffb) r7 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r7) r8 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r7) add_key$keyring(&(0x7f0000000280)='keyring\x00', 0x0, 0x0, 0x0, r8) write(r0, 0x0, 0x0) [ 1009.918528][T17788] dccp_invalid_packet: P.Data Offset(101) too large [ 1009.959359][T17788] dccp_invalid_packet: P.Data Offset(101) too large 23:31:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d026800000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x20400000000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) memfd_create(&(0x7f0000000000)='selfuser\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000180)="47129620ab424b6a9a038914ddc28f4e616d1197bee6df64e852b0cd32ac6addb07a83f401b4ae8fe5c9bd60311d6c9674d19a3d6b9078dd531880d7a7ffd41197bd4018a21c283814f407a4b30e7d05", 0x50) 23:31:06 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) fcntl$setown(r4, 0x8, r7) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1010.158379][T18004] sg_write: 11 callbacks suppressed [ 1010.158395][T18004] sg_write: data in/out 1744997626/24 bytes for SCSI command 0xff-- guessing data in; [ 1010.158395][T18004] program syz-executor.4 not setting count and/or reply_len properly 23:31:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='map_files\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r4, 0x3ff}, &(0x7f00000000c0)=0x8) 23:31:06 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$pptp(r7, &(0x7f0000000180)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) r8 = msgget$private(0x0, 0x80) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3) msgsnd(r8, &(0x7f00000001c0)={0x1, "ae0f7702f39d42e555ad8ae9ca8896b03c51a490849b4d3897a579cd39955178e1219d739a27523681c4dacdf1eaef89"}, 0x38, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r5, 0xc01c64ae, &(0x7f0000000240)={0xfffffffe, 0x4, 0x81, 0x0, 0x81, 0xffffff0b, 0x5}) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000080)={0x9f0000, 0xffffffff, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0xa20933, 0xfa0, [], @ptr=0x6}}) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f00000000c0)) bind$isdn(r9, &(0x7f0000000280)={0x22, 0x4e, 0x7f, 0x2, 0x9}, 0x6) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000240)={r12}, 0x8) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000000240)={r15}, 0x8) prctl$PR_SVE_SET_VL(0x32, 0x3d7f0) dup2(r10, r13) [ 1010.313312][T18010] dccp_invalid_packet: P.Data Offset(101) too large [ 1010.372007][T18010] dccp_invalid_packet: P.Data Offset(101) too large 23:31:06 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d026c00000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:06 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1010.527725][T18087] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1010.527725][T18087] program syz-executor.5 not setting count and/or reply_len properly 23:31:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xc) write(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 1010.602398][T18180] sg_write: data in/out 1812106490/24 bytes for SCSI command 0xff-- guessing data in; [ 1010.602398][T18180] program syz-executor.4 not setting count and/or reply_len properly [ 1010.629510][T18196] dccp_invalid_packet: P.Data Offset(101) too large 23:31:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d027400000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1010.698698][T18196] dccp_invalid_packet: P.Data Offset(101) too large 23:31:07 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:07 executing program 5: r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x101, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x8002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000440)) write(r1, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000080)=""/117, 0x75}, {&(0x7f0000000340)=""/146, 0x92}], 0x4, 0x5) 23:31:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000340)={0x8, 0x0, [{0xfff, 0x4, 0x0, 0x0, @irqchip={0x8001, 0x8000}}, {0x6, 0x1, 0x0, 0x0, @adapter={0x4, 0x100000000, 0x7, 0xffff, 0x4}}, {0x7, 0x1, 0x0, 0x0, @adapter={0x6, 0x5f9f4dd, 0x401, 0x1, 0x6}}, {0x2, 0x4, 0x0, 0x0, @adapter={0x9, 0x4, 0xffffffffffff0000, 0x100, 0x9}}, {0xff000000, 0x8491722ed6a99199, 0x0, 0x0, @irqchip={0x4, 0x3}}, {0x1, 0x1, 0x0, 0x0, @msi={0x1, 0x97, 0x2, 0x7}}, {0x8, 0x2, 0x0, 0x0, @msi={0x6, 0x0, 0x4, 0xfffffff8}}, {0x4, 0x2, 0x0, 0x0, @adapter={0x1, 0x2, 0x5, 0xaa, 0x9}}]}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ASHMEM_SET_NAME(r6, 0x41007701, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1010.810247][T18233] sg_write: data in/out 1946324218/24 bytes for SCSI command 0xff-- guessing data in; [ 1010.810247][T18233] program syz-executor.4 not setting count and/or reply_len properly 23:31:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x401) write(r0, 0x0, 0x0) [ 1010.965227][T18245] dccp_invalid_packet: P.Data Offset(101) too large [ 1010.994105][T18245] dccp_invalid_packet: P.Data Offset(101) too large 23:31:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d027a00000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) inotify_init1(0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:07 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$eventfd(r4, &(0x7f0000000000)=0x6, 0x8) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x208002) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) [ 1011.219510][T18354] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1011.219510][T18354] program syz-executor.5 not setting count and/or reply_len properly 23:31:07 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1011.284873][T18356] sg_write: data in/out 2046987514/24 bytes for SCSI command 0xff-- guessing data in; [ 1011.284873][T18356] program syz-executor.4 not setting count and/or reply_len properly 23:31:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020003000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x501, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, r1) write(r0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x20) read$alg(r3, &(0x7f0000000180)=""/44, 0x2c) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) getsockname(r2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x218, 0x401}, 0x40, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, r4, 0x7, &(0x7f0000000080)) syz_open_dev$char_usb(0xc, 0xb4, 0x8) [ 1011.573238][T18370] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1011.573238][T18370] program syz-executor.5 not setting count and/or reply_len properly 23:31:07 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1011.617933][T18394] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1011.617933][T18394] program syz-executor.4 not setting count and/or reply_len properly 23:31:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) socketpair(0x11, 0x4, 0x3, &(0x7f0000000000)) r7 = fcntl$dupfd(r4, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020005000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0x8) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) fcntl$dupfd(0xffffffffffffffff, 0x406, r7) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r8, r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x10, @mcast1, 0xfffffffe}, r8}}, 0x48) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) pwritev(r10, &(0x7f0000000280)=[{&(0x7f00000004c0)="6684283aca2441bd8174a78c7339850dc6137c4771cbc47c00075b1043642de0b1fd31b9dd5d3c5eb3bbb81c3cb1700956ef4a3dc120b62a7e3c5529bd6587f7bb5d72a0fa07c2690c9a8f45879132ce0ef68427aee94086741e0405234d6454c136b861c68f48216753d00492d6811680dafc504f18c003c37fa513de4e7ebb6531daee04a9bb256f19678f6a71dc517c8d41cb7ac64dadd26e6bf889fee041321846df288b", 0xa6}, {&(0x7f00000005c0)="d4d35340c0ebe306c6fe7a935c57c1ec0eaa92788a4c77c577be6a2d17c5aa20507d339ac832cdcef3fc4db45c260c31f354b5357497efbfabf995ce031a9aa4d9199a6a9a1393e8edcd17dcd398709ac12e0a16aac638425fed93f476ac021fb20d87ff48045a2673d840182e98d7798ebd23a1be952e3b2599058eba7978495c732de1d021b109bebe4e0882699c887d53146252784c6af5a66d04f1129daeb2ff832295ba1cbf2d0c12c3a6aa21cdeffcd63504a5f227926fb0c5371ad4f246218f3002379ee49252f1f1cdc85e2f96aa03d9ad85683081ae2c96df8acc6d36", 0xe1}, {&(0x7f00000003c0)="bb4f15011d0f861df6bf47ae17125c01bace267e09a0d1300862837f66fc946cbba39e311cd7a7b28509fe1084f9af435e601a732c6cd5f978bd8d739099dc4de6bf43dd60dfbdefe218a300a170dcbdf7e7650edae8a3857536f6a0202967114e715ce65e062779899f29dc3b0d95b8ff86c09c5d3cd9c7b980bc6529b08763192575c24c9b", 0x86}], 0x3, 0x5) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0x17}, 0x3, 0x1, 0xff, 0x1, 0x8000, 0x8001}, &(0x7f0000000480)=0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:08 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000240)={r9}, 0x8) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x400000, 0x0) ioctl$GIO_UNISCRNMAP(r10, 0x4b69, &(0x7f0000000300)=""/4096) epoll_create1(0x0) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) write(r0, 0x0, 0xfffffffffffffcae) [ 1011.924122][T18590] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1011.924122][T18590] program syz-executor.4 not setting count and/or reply_len properly [ 1011.946045][T18594] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1011.946045][T18594] program syz-executor.5 not setting count and/or reply_len properly 23:31:08 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500000008004c0000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:08 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x62000, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000000c0)={0x200, 0xfffffffffffffffe, 0x6}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40000000009, 0x16d082) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) write(r1, 0x0, 0x0) 23:31:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000080)={0x41, 0x6, 0x0, {0x6, 0x3, 0x18, 0x0, 'trusted+posix_acl_access'}}, 0x41) 23:31:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast1, 0xed37}, 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020006000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:08 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020007000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:08 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000180)={0x3, 0x80000000, 0x0, 'queue0\x00', 0x4}) 23:31:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x101, 0x101002) sched_yield() write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000007370616e00001000028006000e00000000000400120000760e5d1f88a7faa34cc9d26191b19ac74368726927f9401a65ceed5c9dc6772717b9895513ad041dd3b69f49e20b8bea10104b7fbdc466ed21c63b46ce1d27fd557675858c63cb5343d6ea485bf7c08b7cee5d785c2f39570cd997a87c60c9e73caf336753133faf7fbedeef465e2c14597324e85e559b37297e585a9f7975ce12238e05cd6e70cbf1c8104369eeac8bb29b64a7c1ca7ea9fe3b4f03f6a787f2e99db551e96dfe4a8de1146030e54d2f23b1d2f0f9f514d239844880c5f052b1ab652ce8d963cecddfe68610597184f09dcbe27589"], 0x40}}, 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r6, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r8 = dup2(r6, r7) read(r8, &(0x7f00000001c0)=""/108, 0xfff4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000340)=0xffff, &(0x7f0000000380)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r9, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a5200200", @ANYRES16=r10, @ANYBLOB="00022cbd7000fedbdf2502000000140002000f5127f690c765bada29fe88000000000000080000000000010114000200fe80000000000000000000000000002e14000200fe8000000000100000000000000000bb2a00070073797374656d5f753a6f626a5263745f723a696e697472635f7661725f72756e5f743a733000000005000100000015b6058e2badcfc7967a6a0d0b343c9805ba2cba9b15dc41f9bdaf08fdec398e7d5fbbff4451be6689c56a81d3d8520012d800"/196], 0x8c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="01002bbd7000ffdbdf25030000001400060076657468305ff46f5f6272696467650008000500e000000214000300fe88000000000000000000000000000108000400ac1e000114000300000000000000000000000000000000012300070073797374656d5f753a6f626a6563745f723a7661725f6c6f675f743a73300000"], 0x84}, 0x1, 0x0, 0x0, 0x10048000}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x8c, r10, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:devicekit_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r2}}, 0x18) 23:31:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_subtree(r2, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x1, 'ip6erspan0\x00', {}, 0xce9}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:08 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(r2, &(0x7f0000000000)='./file0\x00', 0x400, 0xd0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = fcntl$dupfd(r0, 0x406, r3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5376}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x38b5ffe8dbe17ec9) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) nanosleep(&(0x7f0000000280)={0x77359400}, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r8, r7}}, 0x18) 23:31:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020009000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000080)={0x1, 0x200, [0x1, 0x7, 0x9, 0x2, 0x9], 0x6}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000180)={0x1, {{0xa, 0x4e22, 0xffffbf0b, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, 0x0, 0x2, [{{0xa, 0x4e22, 0x3ff, @mcast1, 0x9}}, {{0xa, 0x4e24, 0x80, @loopback, 0xfffffffd}}]}, 0x190) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f00000000c0)={'ip_vti0\x00', {0x2, 0x4e22, @rand_addr=0x20}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) r5 = fcntl$dupfd(r1, 0xe1455fc7540d1bff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000000c0)) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000340)={0x5fe, 0x6, 0x4ee, 0x9c, &(0x7f0000000140)=""/156, 0x67, &(0x7f0000000200)=""/103, 0x83, &(0x7f0000000280)=""/131}) write(r0, 0x0, 0x0) pipe2(&(0x7f0000000100), 0x104800) 23:31:09 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02000d000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1013.228638][T19160] QAT: Invalid ioctl 23:31:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = semget(0x0, 0x3, 0x2) semctl$GETNCNT(r4, 0x7, 0xe, &(0x7f0000000340)=""/163) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x8000, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x20000, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f00000000c0)={{0x9}, {0x81, 0x7}, 0x50, 0x1, 0x80}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x20000000, @dev={0xfe, 0x80, [], 0x1e}}, {0xa, 0x80, 0x0, @mcast1}, r3}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000500)=0x1a, 0x12) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0xe0200) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={r8}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"/451], 0xac}, 0x1, 0x0, 0x0, 0x20000484}, 0x8080) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000100)={r8, 0x6e, "391f9797627c51aa9589b90cdc7801b0f13a641b36d35347d72e5ea8cfc505cc26aa2f07d291c4ebb36954656d04df10ee497a02146db379868f34088edb71dc5aaef589d0f6c680140af073b7f440eed185c0f36eb861aee3a6f42d32f387b4b360c5e5e926b4e0b79b1261312a"}, &(0x7f0000000180)=0x76) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r9, @in6={{0xa, 0x4e21, 0x39fb, @remote, 0x9dc9}}, 0xffffffa0, 0x4, 0x1f, 0x428, 0x4, 0x1, 0x69}, 0x9c) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x101000) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:09 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020020000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000180)=""/35, &(0x7f00000001c0)=0x23) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000300)="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", 0x1000, 0xfffffffffffffff9) 23:31:09 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500000008007a0000000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept4$phonet_pipe(r3, &(0x7f0000000000), &(0x7f00000000c0)=0x10, 0xc00) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) msgget(0x3, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x400100, 0x0) 23:31:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000006c0)='/dev/sg#\x00', 0x41032, 0x5a602) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000001940)="02a546eca873d595f884f120967d4ce2b11ae865a947e8f9b3c7c648dbfb368fd108326ad30061bda98ae26b9dab759a28fda1f30d673e98914ab22b0be46422b03e255e39fe94edb476d6aa70d02c6f2c0754d833d891e4ec1e6762d15c69c8c855b0bb6da11412e3d1bd89ba415aab8556557c2c818484993fb6f1bf8762ab27dc1ce86e480f2782c604f3d75e3c27641866ffe600b02c99187e3c11bb8af98e91", 0xa2) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000018c0)={0x0, @multicast2, @initdev}, &(0x7f0000001900)=0xc) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000001ac0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000001bc0)=0xe8) sendmmsg$inet(r2, &(0x7f0000004940)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000280)="823bcfabbb30397d4d5ddfada0d6b9cf1ae93401393760d2863a170daebc6be9d38a017840000aa48ffa6563dff5a542106bfc899865c94a1b39bede9e61caf8e1ee85fe666f51d9450d724a0b87d25abd829ae87fd392f62fc69784b08f35514f034a20f84d34d9328648447ca49992cb02aa43ced3b71aeeae92b60e6423da0356c87d4146f0c623e751b3aa9a684bd32099668d91f41fa01e3640c9c4cf00374f53d1b0f11f4e67a5317c8a808fe3de35c2439e8dbfc0858a5c6bf40014b05a8d0bfa78ca8fadc3d322191af61b8b2662a2f8ef1a3086cd9eec054724ab2b6d7497dc", 0xe4}, {&(0x7f0000000180)="65a21b8f03", 0x5}, {&(0x7f00000001c0)="c95ffe139839430d561dd8c57fd6b20bb29ee01c6884137b27f450d7ee9e3eea0b0b8469578891a9ebf3ea20c0e69cb8524f4c36dfc95a88525e98fa5a99fe2ddde6cf", 0x43}, {&(0x7f0000000380)="14e2273d20778b1f4df6051d8881f5f4b11d0f2c4cf97b5c97c7f14c75611bac", 0x20}, {&(0x7f00000003c0)="c0e503f2a3ba9144b6866e62129c5b9089ec19c5a4569ef1c9f49298ad813c6312733aab34e77fed9917f2acae10527beda3cb8da3f083cc56f25f6e3dfd26e8483713c92c9810649ce363d54293736ac40bdabc04f3a512ce3609818aab803fc2d3299b6e32617392be9d966bbd82bfb1e7bf663d87d29931880d8b87008bd124ec062b062cde265a8ec0bcd494683810e94351ba17f9878bb58177140fb93d423605a4dc8baf5ffe58549c7c16147d409e9eda23d4e94adb11bfb0d941827ad6c0d83703c9629477e302d71089bfb6", 0xd0}, {&(0x7f00000004c0)="dc9aea5b66aa4e632f2a597f592cfdbb9a2df832976c3ba6dee6ebc0f6739a5300bcd77feca0d4572f4b8b0b0b8dfcdb1c29417b492c1b201d4ce6d3372e9f92a3c95d89ac2deb87a89a726fe1cba0f9c8820f40727bca6dd298b826cc5e78d719a0da29905995a18b11785a6db5ab826aee6de965bbdbf1c5de8fd66bf5ba821e50fff2cee736cce2a8d48aa3305b8f8a4b3a44f516195701cfbf84b2c50b17a63f07c42c763d026b6a23d7706d439ecdcb6162d6f0f9064fd278c7aeb8759fb1c56f78b147f3f54e4dc9b4095746290d15", 0xd2}], 0x6, &(0x7f0000004fc0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xb2, [@broadcast, @multicast1]}]}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x3b, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x25}, 0xffff}, {@rand_addr=0x799ded6, 0x6}, {@multicast1, 0x4}, {@rand_addr=0x7, 0x4}, {@local, 0x4}]}, @noop, @timestamp={0x44, 0x14, 0x7a, 0x0, 0x7, [0x4, 0x5, 0x80, 0x5]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa54d93a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x128}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000007c0)="2e0c7a4e7627822657eb69bb08e038a0ac3da35717838873da4ec5179ae8dcd3a9290698998cce6bcef1ce36d52680184020654340ddbe1130796bb266f8d83a92f766b5bc882393f6720c2957eb037b40278e1a283c77b4723b7c5ed62be3f6cb2deefbdd16cd44fea42611c82fc5db7c018dd44d0918a20adf137e", 0x7c}, {&(0x7f0000000840)="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", 0x1000}], 0x2, &(0x7f0000001c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @loopback, @rand_addr=0x1ff}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x88}}, {{&(0x7f0000001cc0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003100)=[{&(0x7f0000001d00)="ba6bb051b98d260fbb3ccf7d3c479f517762ddc20cdd8175c644b79740de10a15c7c55f66fb0edbd6b1ca859a4b730d6f97cb5052998dd1d187470660d123c9d6744d7cecf191b47154ffa1326de3709de6bc2015a8ea4ec4c55ed2fe2aaa233cc6634c012441414f34a81ce8898617a7a61659923b1f0bca0121c3fcb32db0808e43f31ece2aba6ee9c38301b9c882c5502f09206d5b59246f3db5950e2ece802ea04a92d707122589c68b89a2481538c556bf183ce4498172f0720b7871da5fd92dd7d8b0a231c56d8d3388b6c5741f7d02e1b244d6d948ddfda586bf605ed2d2a02da196aea2527c74e81153e066153a975e441", 0xf5}, {&(0x7f0000001e00)="af0e7f1f34ea5e85f3e6be555bd1f95e2d5670a2adcce645da973ddd2e32c479e21d91c83b1d96f99ab65cef13f01330f7273633", 0x34}, {&(0x7f0000001e40)="26bdd4e6ae3ddfa90104fd58b9ec318671", 0x11}, {&(0x7f0000004e40)="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"/351, 0x15f}, {&(0x7f0000001ec0)="c64fb524c6e0c076561775ccf5d864ca271db7d608716faf202460538f7ab3abc179524b716e1cce30af68c11d56f8bf6af68d2fe4a8ee9654268514d34b1b4acafddef374a69450d5e2426e039bb234a7d8b02b145fed1440b5d69697cfe81dbafaf1700560d6529945d6996faeca6a990a82cb66290caacb983bf1d65b62e10c7c34b8c594814cd6be125e4097b3b16ccfc72376c0af7fad80c466a8b41dd67eceea6e99099b4b412f96e11ec0f744600fe5aa7f76a30f5d6026a36a0236286f587d78cc5e6a6af0fc313e1d7e0073be4c4d8ae4b2ba2e9daf5bf74e890e313c8a324f034ce88571238422a942794afb69b8838ba3fce1f75722226714b3c21e9e4369d86e79c9dd9f66a3c8e582f1b31809434bd69cfc45d354bd6c4650c6a7ea2995587d37b367b8643e6331d62f00b8e903382fda38778a5420f1f34f75757020260d01c06306ba33975170b35f2199ccf80fbbbce44be90820a50c7a1ef6a8333ed000ac420270988138cb9c4e517a0d3684195320d467ce6ffaea292bd0322d34bb22ca1fc70b646dcddf6446213d6916646b831d8506daafe76dedb5a2ffd69dd90906a35a06d0a65291b708da28fc5bdfbc6138b3fac9ba63724c4daf5292b3ef188ed2167e18adc00fffc805ece3889be9b5423e28879e955e75d0a1da709bf8793f9a09f61b51fc3cb7383417a39d3a2873b0d4f339c3280a9623c0dfabb9e2c0530a60168b0d81ed079a8073fa1562369ccf39804d328a0dbf1a2f90473b08c4b8ba8d0e0f725366e0062397fd19a988745eea9a2d335089eeaa16aff5c9ac3933d791317785a662fa6180d598a59e2620b27d08b32360d87379afd7bd93d8cf3212fcc1b6fdf909d7a23bad7e3baf3fb0cc6762c428fbec765dc7a4c67fa4a1e884d03d28ecc5f3a994225e6211dca9b81e454c1f37b8e8292e44ff31debdf9bc5900c775dd4b99a1948e522aeafcc61d4758309d68763aae7103cc9801bbb50efa7e8a9439692ddde557321df8ddfbc3596b5170ee0922f10c4539a5a91c1c368b015187c8364910e2a069fde75ca7f8ec1bcd5dc3061a1236071e853ca6d674b5df6ad558831f4ef632a58a2a3085cfb06b87b9f60fb71577f2feebc773cda18ccc6bbf6ab08a807e667d1b2beec2f3566ae9055efc61971d9056e70165920ee6826fbcd675cad4e914ce32806ca91a2a2eb353df995a241800c43f711418f0fe51e4ac7b09e3ca2791b81b086975cb77e6517e234349d07e8c6443d6b9e6f31785cca12759d11b7715b0a7ffae7ed9600f245d19df15681f04428470139d0cbfd979e371a86b484bc711f7409a7add074208e81aeac5b7973cc191faeba80920b8f1b2d633128900ec10021d1a0fd6e2624cf98e239359ad188467d91ba71b8a64cfbe3dcd6d68134aaf500914a03abb92db006e3523feb3e17606d7f0634a52f3eb74b055bd22ec5f037965f8080f28afa92538cacf6cfe48c5597943be58e52f833579060f801b64d68687b02810dfb5540954c9265b2258d61913a52d5cfc4d853b029ab49acc3433f32229d942e3dabc32e4e10bed95c9bf881440bfb47b41bac0d5cca1f4a48cfad9a1a8b0e8297e9e163688c9fdfab8d8f423cc22305985f6c4d289244ff4168a7eed5f2e45deb2b2fff1b1487c31270b795438e1556a9186a9047cda76e9f59de8239633508ac88c9c444a1ce5f82385a4d010cc8cdac9f806e124c268f245bbfd403a9b7570827c19adc2a97050a5b38fa6be0394a6208a38be82cd277b0b7b964483d4c660d684077726f79cad127b8e0d02d1f93a8207b94c08d6b78d050b61039d0eaba3839154eaea042f25b9f705351b07038eb243e28e65a8b5c43066bd37750617c3379f713e9bf81cc654097fa3a4e7b411303d1c3f9eda08fb8c56be76ba9e1a77caaa49411caceaa1eaba709af89e8e214daf14b5043002203b54eab89a10701f03fbb1d08de218e7a277c24d6f493db4953e09c7c109476377d304e2e5c0799a428b54c0332141e04afd8ce47f6e15c84d6e8975bb86319000598be6fe530c841ee465425ea0f276ad340efc3b8632a16e7407a527144377b03e8d0e46db44732c471b4a2af440f4578992b7272eb2fa3d23a3737fdd2186014db23d259863a3ca7da418d3ebec2cbe90eba9e190939fd9baf5afe36f4364be0abc2887e0d93c436b22a412bf6ef44f97064caca72e6395366787fd74041b35bc142045f1ea65daacd20622bf55cd48983fd8df90917b92f6dd3fac040b6676a4129443dea247ed31ab52639c8de972922daed905f10e633e5a9eff3e9949a5641f69a208c63dcb73e7df85712e4ae595ce2d76f2f6a0a23874b7e00dfd7cbd29ff73767f29f3099f93d3ed1c2ca03a91e6aa1042bcc7207e8def75cded76143d1fb6bdc151ef857f536b80a91bfb50886ecca6b2cf4e3edfba32e453457e7187d6b6ac23b0b14085ab906e240efc50a4615a307635ca6af019a56e79e8577fd676f2e56d0c65ad3c1555bbfc0e48917ba1eb1f7a03f42a748121f24ad5e2c9a6b382dd311a5c2b76fe3fccc96766e963dbccf514baa234494c46667ab2b3af4cd840e82218b0dfaee42a316ec4a9cec462d223da980af0136a55d3493b6149dfdcc2aca5f167ff996e043749b21ee204b215663d19254fa77eb3281b2993f5d496cbbc84a9749fb72845a22e635341aa9a3a70a6967981ad024d873a355fb0a2cc43348eb52d40147710b0fcd452863dcca35a2b90593025df31adf618b8f6f807a1482bba877169bfaa9b606fd83084d718544be39f9f9935589b83c957503a4109dd16d1d349efb04715fd3ae8f633d44500ead846ef4a4c6c9ab68886cf5487471aaa117855beb14dc6b05932540bbaf560fa3659d336b2d0dced8c0fa21d619f3f2cfe21d990b7e0c2e5c18216d8a3ef0910d389d0331c2654104017a5777121a83988e6ea5094763ba76f0a3c4103ff6f9a1c55d48321630852f4c6f68002886a867e6387952c3e40c075f9f23489be524044cb22f54952737aad71299f2c3af53f795d90714b9073970f782afb214372ebe83eaa073f25b9a74a990f56cae02c5a0c712554b3240ddd087ef7f07babd4c50a48231d542315bb634af798d10f82fd727d8bdb7742cd3be08a4b24a7e0a639391dc5cc08bfe835aa153c4fed79201b89ae138779bac9caceaeec1e68b8fcd3b7740bbea790551279f811f5a64bc429dde1e5821d3a89c656c317b6fe9889d77131f6e3ad261bb4266d6f73c278b7b2eabbd927a1327af7e8dd9811ea07520e7a3d0193c39b3407643209ec8e5012b9c1140e7cc48b4b630c90bc07d1a298de03f2d704f503f023feefe0b233e96d7b00c992e9d8dc60179b8641986c21036e7ba9d709b61f8915a23ea0a5b667ef6d9c70412135161bdbe197d4046b214eb0e2ada7ddb8b20a264abfc5023c09658a9cc7ed8e3270937e50185e7128eebbc465fd8490a9876d483f515ed3b22851c52d0ae291228b6cc8da464fa9ae384c9c23c225098fa05df7ced55fe1ef646550aed9d5ee12aaed4c88ebbfd78a5e20b6940b5c15d501f5ff297f51b8619c47b100f78882cf578d29640035dd99017654830d07c4b3cb31a17e4cbc1e5747c3435ee29ab68d49868a8c57f2478b16c39a5289550e803cb6434f3817d91ac81e23e2c32db1dbd8986ff05a66de318e3aeaffb05e5be85e41d4e9dbe5444eeb4ca95658b18851bcb34a5652fa9ba894e4a3d5d30044bab4c9ed263da4a238ab4e028f55398eea78054a98b9164395bf77c3f66da45d488a265cf3870e4626145bd797ccfd3b53f35979308701c902aba481df704b0ef23ac38844479960fa93753927ed92b1cfe948e3423185e7910569959150ff2be495061a3903e57be4a377c5f9b434709902376d70f9d18024624f4e8e59e11413cc5137e697418ab8b6b92c27b95f1039e2dffd7e216fcd64366151fa2415dca6e413f1745c9907ed1bfee9d20ee97f068106112cc97164fffe80fc6123afa275767e30a0c9a7e0c1ab314d496510cec94a0784f23b567f92169bd598ed81d44230ea126701500d2af6b818cce4337b95722597970092e4dcd8c3bdda4d3c5fae6c70dab8c6c6bc135f47ce5faefba17734acb2cabe4e8faa8ab9c83f90e8fc2a1f80697da2a5a594a77938d705e968e993ed32edb08edfe8bef25ec96ed0f33e44175868113935b37027a44b715a24eb53515e0f86e00582fd01f0e2fef649d058ffea22e3d73c4e81720606d2713542ff71e8b10d08519d33545a73a191ec22a429822c36fc0d8989edeb167be81385a74ba25044096a78737b1e2aac4a0898a72b1e4fdcf522f6b5fc8e5bdcb6376813aded37c306473f3ab821acf718781f6479d5e78bab60c8654e2ed63611c24d63c3071c60a1313ee162c659a57be5d0be49310343f4b81bd9c89ccc2170512bd05a4f129ddfea0ea04a3b26d3a9e646c713a3e4541fe92ba01c21a07504caa835f7fd31ab0d51d3d7fa9a58b4bd7bde2d78fcebe1976957c9ae9c8c6c42c4d5c28e70c4e380d734ce9279e93560d2c72a67d60ed3f4dccb346849b77bf722aff28e6daa63ade2c99714fc784bb514d9b540779cb42818b1d0ff91451c8de1c2d5a397a339276cfbc6456973aa30babf685c646fbf532e65f80aeb2671dde5e07c1e5a092e00ffb92d0bcd5c618adb4d493090eaeaa503feeeaca20bbc5d19f2e08b6d4fd4c387275f4b8ddf5b089acd6e2de6f01c3feaeab7ffb1d6e068b27b57d2eacfb90bcfc318b3dd88b74b258e9f9baa9e5dea59e8f70e8980b8b6b4c8afbbc752721158ef7d2ac2c0e1fe17353fc1cfacaba4cc050d8a1d4a0f52b0684dd93f6d55b81fe8ac9c7d444f177a40276597c7d98bcefd042543ff688386c5e5b16a3742612a7ff29e46890e4184f4c0d5f67215f1abcdece65e5e1cb1f644ecc2ffd7a0b7d1b48ef14297f3daa68e20cd47347120c041116673ab73ed2d4886670a35eb43d3a36b993f222e18b700423f213a49dfbb1375fe1c6e5d13194dac9a4914fd9f3bec5857d45af7641c29f8d4876b4363b36fe0d1563eb685752e9ea83f16caf0270000de8fa102062e72f2caad50261112099965515f50904a9a3e56def3f86edd1d3f11735367cd8b56a5daff21cbc69559b004c95870cad1cdda41eceea8c863cc63163835cac14e5cf3cd0aa34894070deb0c859f7719662ae32cf892b2f3e407bd2e361562887214e222c0cb18b6818436da73b4561264dd042f81f7680acaaf5fcb7ee97a4e53440f16b5ae2bfa7c03488f6b68fa5f6c544e10e89351ffff4b18280c320703f7bd5890a653f78ae371d1af92b79bbd83db861efef241c2f4973babbe2869efcb5ac08252eccd549b9c510725ab64f3ee7a8fb30305ba20138aa6eee752cf2fdb44b583a91c08d96a7055a10e4f5119140eb8657fea18252d4b83dd49a2f4cb5e2a6e1544f43fe3a1f8009124ab2ee3c804158a6ee678920dd94e02d9fc900a4fb3f6a2c59d4727d3d5272a38e4304dae0774ffe32d21ca80c2647d602be34b171afe6a2cd793abc651780521f593e4b32ee7611cdf67d0bc675878ebe1a811e6d557c91d15d29cde9c066f05177d1404cae7ccf17ad6e77a993813622a007ca10378aecedfe2c1f2c2bee94b36a02f170200d66927bf84e9fa2e0b4f4d661195ac161dbc94381e040cd636721c84b76b459697fdfc0b16728f0e4ef4e2cf15feab411de5d87d10bff9bc7fab27abefb4b10b2bb9954d", 0x1000}, {&(0x7f0000002ec0)="3b989033ece9e7ae50852518f666ee0070054c0403c574c806b45a49d4da8ef96297390229f7a834db009af00bd9673eb1f689bd8f2114e492794b2f3712860c913fb453c4e6e40b4337c4b8c633a682d76b713610aa58fc4d40b6c23c83142b2cfc8430494c77a6dcfb6a2790d5396094bbbc17b05879b6c33d80f7c7bbacc63008a723fbc156a6f995b143f17a", 0x8e}, {&(0x7f0000002f80)="aad83c71f3ac242c35bd1683afba1dae7ac26ce5096aa9a4e6edbd406b412a9e016cd3f5d1497b45659d76a7468d55d8f61f15f7ee8c0ad00b7ab2bcc691d506b4abc766cc3b78d80fb06e871c25c23b0d4bd4a4f6cc4d67576215b38c9aa86a81034bf434f303dac3154de248c01fc43b692676ff34c3c8c0d9e58fcafb1c1da6008b93593e36be38187718f5b206287d375307fb83cc58ad0752d3b74b5fa9f44fd4c0acd32e53daf2dbb3ff71a2e9701ff2ac5b7cd567e5651884d2afd714b7eb1846b26073be473c7fd9", 0xcc}, {&(0x7f0000003080)="70bfbd4066ebee0d7ff75dbf9ca7f369cd3b4bd64a5d5b2f0c5ce6834cbd20bd3ddd5db1e20f83e8cc0732c0da69b3ac5855b3d507c4c66c30687c29d6fe532859a5a76847c1a6a2c7f1d304", 0x4c}], 0x8}}, {{&(0x7f0000003180)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000003300)=[{&(0x7f00000031c0)="c12ea5a8ff2d4f1e0cec48e6723c30216e98065bf9ebb2f9ab1d736cedebe082792dea4df29553d94da29241f524830b66b82c324024c9e9a9c1b31a59d139fd2d26d3bccdab03c795386cb2a8a3f80fd50a7e080f7109558d02359a32e8986a79c429286df4679c289f6c0554547acd50951c02883c9b9abc0a72401a6456a91268454659ae9e", 0x87}, {&(0x7f0000003280)="154c38b270ec73f82e229598cae2600c8800217ab2105861ea70a5ebd8022e60b0f9e46032e5c7da2e52bdc3c006dab3f5c1da4131992ba05600073d74cef2923730a64df25db3fcd2b4c69bedd3f6f41661173769d26076", 0x58}], 0x2, &(0x7f0000003340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1a}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}}, {{&(0x7f0000003380)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000004740)=[{&(0x7f00000033c0)="83b2decc17a7403039eddb13afa3e4c121c2616416dda898c3af86676904ecce35c90e021de774505116081d30dc5d5ccffa95252e07468572cec8fe0ba832c58366a6f5ad09d254526599071612a53f57", 0x51}, {&(0x7f0000003440)="a0a0d511117ed14f1e4b3f9d2be274272569f8e298d24115e4a55ffc4fcbded3345a33d8a0de6304e9", 0x29}, {&(0x7f0000003480)="df3e9588703fb3d6c0a772c66c5c9f03eeb1dab1e9ca52ddc232d8618695b8ac92bd698bbb0eca1724d449d9060a7d0c757e9071307e3140641ee9115b782897ce03ac8910cbbb8aa60ba2c82c14e9e48b494a50dcfd21a120e512228200f1ce56e543d3b947484fcb5bfbc730bb3c82388afbd725f0291c5f8e50df73f91c1ac9f1eb500b42a202ad3eeb403d51b77bba51ed29a261059c60464ac197fb61047e5fa0bf15f9ed2c808fb7b827436d9f7a8d1ec2d824ab3abc827e", 0xbb}, {&(0x7f0000003540)="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", 0x1000}, {&(0x7f0000004540)="b413bca2aa8173bae13fa8a3364f2be15d5d850005ed3e45262380f932cbcb2ec2d9d2d7c7278b8702759ef3db081daa6482f6e559ccd6e59e22e60abb556b793e36d31a103c170a37f38e658786d84a061e50cd1abd02f2f2a3a7d32d4956ec5ae407e3bfd503020f9b45df6c4f285a848fdbd5ba9ba10b0e2f2eb727bad25079338f3b79464955cce104bca0c07bb32a6f22f871d0e05074d8e3087d1cec0966cad3991a784038ba754e4dbf6f9c0b7005de2501d5758d6eadbaa1c040af19b41f40f6b478", 0xc6}, {&(0x7f00000047c0)="cd79be2cf7fd5bb5fd90516556304dd16be482f6a70b6e25909cec847474fe35a87ee83559cf1e3f56d5c7ae0b09ab25ab9f12a88b31ef224f58cefbca20054c9b3b52f7750632b8f7e219a28a54ecc18ab5f55de78070e3715a8e4ff28129bf3e45eed6d1a390ee53f4584e4903c29f0e5b6b2d6b947f56376b6a898f0037fcd8a2e4bde392d92deb7d88f11b009af86656ffbb36c04fb6395f565cceff6ddf11d3780a48c058c4e010804ba92bb4006bdfc4fbad348d8f1e1e1bdacc40ff703d6470c752374b8cc36bebc1658942d2191fa4b0d6ce86e8452a12f699aeebfe60eb47a72595810096c1cd717d3b9d1c30fa6a06fe478c480c", 0xf9}], 0x6, &(0x7f0000004a80)=ANY=[@ANYBLOB="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"], 0x2b2}}], 0x5, 0x4004) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r14 = dup3(r2, r13, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r14, 0x84, 0x1e, &(0x7f0000000080)=0xec6, 0x4) r15 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020023000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:10 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r9 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r14, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r9, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r10, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r8, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r12, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r13, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r15, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) socket$bt_bnep(0x1f, 0x3, 0x4) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) r17 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r17, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r16, 0x84, 0x11, &(0x7f0000000240)={r18}, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) setuid(r19) r20 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) setuid(r21) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x4000, &(0x7f00000003c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r15}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0xf5}}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@uid_gt={'uid>', r19}}, {@fowner_lt={'fowner<', r21}}]}}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r22 = socket$inet6_sctp(0xa, 0x5, 0x84) r23 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r23, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r22, 0x84, 0x11, &(0x7f0000000240)={r24}, 0x8) r25 = socket$inet6_sctp(0xa, 0x5, 0x84) r26 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r26, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r25, 0x84, 0x11, &(0x7f0000000240)={r27}, 0x8) r28 = socket$inet6_sctp(0xa, 0x5, 0x84) r29 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r29, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r28, 0x84, 0x11, &(0x7f0000000240)={r30}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r25, 0x84, 0xe, &(0x7f0000000100)={r30, 0x100, 0x1, 0x800, 0x5, 0x40, 0x7f, 0x8, {0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x1, 0x2, 0x7ff, 0x8}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r22, 0x84, 0x19, &(0x7f0000000280)={r31, 0x4}, 0x8) 23:31:10 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020029000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000000), 0x4) 23:31:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000000)={0x1, "17136d3351a5ea524ecf476d41943d6c24926d16a2721b1395b08058d2fb665a", 0x3, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @rand_addr="d656e7fd7e669fce8fd3eb2fb4c12cf6"}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r2}}, 0x18) 23:31:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$usbfs(r4, &(0x7f0000000000)=""/15, 0xf) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r2}}, 0x18) 23:31:10 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:10 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f0000000080)={@local, @local}, 0x8) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$getenv(0x4201, r1, 0x1, &(0x7f0000000000)) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 23:31:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020030000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:10 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020040000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00000001c0)={0x8, 0x3, 0x0, 'queue1\x00', 0xd4d1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x980000, 0xfffffffb, 0x2, r0, 0x0, &(0x7f0000000080)={0x9909c9, 0x7, [], @p_u32=&(0x7f0000000000)=0x4}}) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000180)={0x1, 0x0, {0x25, 0x2b, 0xd, 0xe, 0xa, 0xfffffffa, 0x4, 0xe, 0xffffffffffffffff}}) [ 1014.693605][T19832] net_ratelimit: 26 callbacks suppressed [ 1014.693617][T19832] dccp_invalid_packet: P.Data Offset(101) too large 23:31:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x200400000000002, 0xa002) write(r0, 0x0, 0x0) 23:31:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0x3}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000240)={r12}, 0x8) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000000240)={r15}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000000100)={0x7fff, 0x8, 0x8000, 0x6, r15}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r8, r7}}, 0x18) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r8, r2}}, 0x18) 23:31:11 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f00000000c0)={0x1, 0x7fffffff, 0x100, 0x8, 0xfffffd5c}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @empty}, {0xa, 0x0, 0x3, @empty}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) [ 1014.881657][T19832] dccp_invalid_packet: P.Data Offset(101) too large 23:31:11 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500000008c8ed0200000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020048000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1014.994677][T19861] dccp_invalid_packet: P.Data Offset(101) too large 23:31:11 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) dup(r0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) inotify_init() r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001fc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_GET_SG_TABLESIZE(r7, 0x227f, &(0x7f0000000080)) write(r1, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000a230441d6865727370616e0000000000000000005000"/40], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", ""]}, 0x14}}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000001c0)={0x7, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) [ 1015.071126][T19861] dccp_invalid_packet: P.Data Offset(101) too large 23:31:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpeername$unix(r2, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) write(r0, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = socket(0x11, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x2000301e}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="2e00000003000000000000000004000000000000004e4c424c5f434950534f763400"/46], 0x2e) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000280)={0x4}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r9, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e985dd}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d00ee37}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d8d8162}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) epoll_pwait(r3, &(0x7f0000000400)=[{}], 0x1, 0x7fffffff, 0x0, 0x0) r10 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x20000) ioctl$KVM_KVMCLOCK_CTRL(r10, 0xaead) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$PPPIOCDISCONN(r11, 0x7439) 23:31:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1015.175750][T19965] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 23:31:11 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1015.273050][T19971] sg_write: 16 callbacks suppressed [ 1015.273065][T19971] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1015.273065][T19971] program syz-executor.4 not setting count and/or reply_len properly 23:31:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02004c000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1015.340553][T19973] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1015.340553][T19973] program syz-executor.5 not setting count and/or reply_len properly [ 1015.370704][T19965] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 23:31:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r1) write(r0, 0x0, 0x0) [ 1015.526429][T20067] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1015.526429][T20067] program syz-executor.4 not setting count and/or reply_len properly [ 1015.544450][T20094] dccp_invalid_packet: P.Data Offset(101) too large 23:31:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000600)={0xa00000, 0xc000000, 0x8001, r0, 0x0, &(0x7f00000005c0)={0x9a090f, 0x10000, [], @value64=0x10001}}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000640)={0x0, 0xfffffff7}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYBLOB="bd000000604c8c7b21bf4eb7dd1497c8a9c861b5000000005863f4181d8f456207c78fefe048ff18d44fdea710c92937e349a9aa70d4fcac12204ac3b623dec7b016af49cbbb92ac0cb805117bbfcfd78983938b9f2cc4d481a0c0e76c77108e1e33295aae11492889c8c1d52ce06027235a931de04b6bd77454b7a7e28363efffcab0a6c2954d2c740296bdc14ba83880268682353cfa0fdbeacca51048a37740bae44f1fbceafc34ff605a58f7c3bb991466c379ef37"], &(0x7f00000007c0)=0xc5) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = accept4$alg(r7, 0x0, 0x0, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000280)=0xc) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r10}}, 0x48) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004801}, 0x40080) write$RDMA_USER_CM_CMD_MIGRATE_ID(r11, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r10, r9}}, 0x18) 23:31:11 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write(r4, &(0x7f0000000080)="b63db85e1e8d020003000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd8fbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a008cfd4b9d4d065e1ba10b610a1cdddef3ea36d2106a8590422e94a973ac6f6e7d6a4df6a841c0", 0x6e) 23:31:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="04474b1949ffd7c066b60f8948459b9b3b6fbe0e01da0ae925d4ea64e7dd0b15407fe5ffaa47fe0ae771f3d6327e3b7dfd3b78f6264027e6ee5f64f9482091b2d0035bee6a73a82ccda3c82f98c2f30acf7527b34c0eb018be125e3c", 0x5c, 0xfffffffffffffffc) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r6) keyctl$instantiate_iov(0x14, r5, &(0x7f00000001c0)=[{&(0x7f0000000340)="10fe458b90e328c4b9ca86f8de5c247515fa8b5eeced1dc58428ac4147fefa989d40f652afa3be2374e9108d58fb07f593a160eeb78aabc63ba67f45de221ea6367fdf82af6a5cd8d39f36e7", 0x4c}, {&(0x7f00000003c0)="a3e6fb63ea0f464c82f2310d71b21450448e48bc5687d5af5f495acb3c36d26135f2b6fdb9cb9b3447386f346336e1909959010f36de7af1d162f7dda5b4ccb6e0ba2b97fc7a9362e33326eb15144caa0f68b736391bde", 0x57}], 0x2, r6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x2, 0x7f, 0x1, 0x1, 0x417}, {0x4, 0x803, 0x8000, 0x401, 0x2}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r7, r2}}, 0x18) [ 1015.599943][T20094] dccp_invalid_packet: P.Data Offset(101) too large 23:31:12 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020060000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x200, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="94000000080000000700000036898f119f0e71050a0d7515c7821a6898181d6e50e2dcaef9d619531ebeffabd2dff2b5f8061eb9dd27e12857165efa31bb3467ea89bc6f8fc2ac53f00439f36cbcb32b5be6c28898f0173539abd870ede2eb77ba8e2a93b047a77de5933a5e6c1e205298023aea574a8c6a7ba9ab2d7bc835e5c64d6750207ee96d78ca2c66902e947d00"/160]) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x1}) [ 1015.849282][T20207] ucma_write: process 5151 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. [ 1015.887957][T20211] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; 23:31:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x8844) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1015.887957][T20211] program syz-executor.4 not setting count and/or reply_len properly [ 1015.891761][T20212] dccp_invalid_packet: P.Data Offset(101) too large 23:31:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020068000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) [ 1015.982900][T20212] dccp_invalid_packet: P.Data Offset(101) too large 23:31:12 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r2, r2, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x64, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eb010020a430916ab68229980b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d3ddf9e413"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0xc000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100)=r6, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r7, r5}}, 0x18) [ 1016.124982][T20228] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1016.124982][T20228] program syz-executor.4 not setting count and/or reply_len properly 23:31:12 executing program 0: setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x40, 0x4, 0x81, "f37ce61bca1087d33f64be0c9ea0a550", "00a21781581c3a9ac12f523fcd4a6617a83998f16b0ae1964f79ad0916f249bba67aafb5e6da90424a795e"}, 0x40, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02006c000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1016.236336][T20317] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1016.236336][T20317] program syz-executor.5 not setting count and/or reply_len properly 23:31:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000000)={0x23, 0x3, 0x0, {0x6, 0x2, 0x0, '/\xc5'}}, 0x23) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0)) [ 1016.295196][T20341] dccp_invalid_packet: P.Data Offset(101) too large [ 1016.350898][T20341] dccp_invalid_packet: P.Data Offset(101) too large 23:31:12 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000800000004000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffb, 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) io_uring_setup(0xf98, &(0x7f0000000340)={0x0, 0x0, 0x8, 0x0, 0x19f}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000003c0)=0xfffffffb) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x144}}, 0x40) [ 1016.460752][T20378] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1016.460752][T20378] program syz-executor.4 not setting count and/or reply_len properly 23:31:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000080)={0x2000200b}) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x2000}, 0x8) write(0xffffffffffffffff, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x9, @rand_addr="7856891d558f0ea3e283a9c6a92e5f22"}, r3}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:13 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020074000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r11, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x100}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7fffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20020841) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000240)={r10}, 0x8) r12 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xad, 0x400100) r13 = fcntl$dupfd(r12, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2c0800) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x64) [ 1016.857497][T20572] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1016.857497][T20572] program syz-executor.4 not setting count and/or reply_len properly 23:31:13 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) accept$inet(r4, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000006c0)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r4, 0x21, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_PORT={0x6}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}]}, 0x1c}}, 0x20002801) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) [ 1017.011682][T20585] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1017.011682][T20585] program syz-executor.5 not setting count and/or reply_len properly 23:31:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02007a000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:13 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:13 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x5, 0x1f}, 0xc) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x259a, &(0x7f00000002c0)=0x0) close(r1) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_pgetevents(r2, 0x8, 0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x100]}, 0x8}) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_XRUN(r4, 0x4148, 0x0) 23:31:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x202, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) socket$tipc(0x1e, 0x2, 0x0) [ 1017.263481][T20803] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1017.263481][T20803] program syz-executor.4 not setting count and/or reply_len properly 23:31:13 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000800000008000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @ax25={0x3, @null, 0x1}, @rc={0x1f, @any, 0xfc}, @sco={0x1f, @fixed={[], 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x7ca, &(0x7f0000000000)='team0\x00', 0x7, 0xb, 0x6}) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmstat\x00', 0x0, 0x0) write$P9_RLOCK(r4, &(0x7f0000000240)={0x8, 0x35, 0x1, 0x3}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000180)={{0x3, 0x0, @reserved="c2e3d3c9db342c4de86e77d12bd47841ebd0282f9a6055a17b8b805d6bf2c226"}, 0x5, [], "c9bc39802f"}) 23:31:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x7}, {0x8, 0x6}, {0xfff3, 0xffe0}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) 23:31:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000100003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) write(r0, 0x0, 0x0) 23:31:13 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x268242) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x40}, &(0x7f00000000c0)=0x8) r8 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000040)) 23:31:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x7efe, 0x200, 0x2, 0x7ff, 0xfff, 0x7fffffff}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e20}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x101, 0x0) exit(0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r2}}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$xdp(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="6e022eea837f67922f3de51c911af6", 0xf}, {&(0x7f00000005c0)="839eff68f58d5d5b1fa37ef124f239f1c9d304332474a929bf97277a4904bedf6ac590f7fe4cc87a6777a32812067c21b717e6547f5e664b3cdc6b9dcb2facbb22b5072a26034c6c7d0fc103be78c763c4865322024e2109ba899956109c4d4bf8d53e0244d9bb22d5a2df083d7aa72ab5a654a8e26540e9aafe39cfc55392c8daf21e0a1608540b17ced2eb60a99627e46bedc2d69a6c473e05d0ff5c3863a83f9e48dbd5f40a35770e5b5b1e41221ee7535748b21a8b1852b08399e843f321b4857b7ce985459309228f24af732d3904427ab3a126ce0cfce321a4589307f181fa0f0e770a39307701099a7bb4675965a0209beb368c54fe825153e57e3328184346c7c3f4ed55784d85e7e077097a89aa3f38c5153a384d10c44a2b3b28365f9d1b3138220bdf89b21aace97422eb1d5270664f72dc22c5d22d981f0dee9ee0f7e516aa86479e8dfe695e334cb9924308662091fb232e5ba51bf7cda5f5af562dbcd0d2ea1b3cdb53938b2ab9314ebb36ff17bfc725b52ad5268f5d09b55055e6a4721c987a7fbf389f6319fdaa5cdd072212347305602ec3dac00d24a81977857587880811f58f1dd660e28f1410e96d2076b5060ed96a88d11d2ea44d25487fd76913ecb7cb14e5ba40100ba2912c5c1acadb3e244e30dd4a51bc17bde27fa0956ebfc16c07cbdf09d61e18bf69e9183cf800f780e3862d7a25b655f1a939e2fcfb88788d36b4399dfcb087c04f7a9f363d404ab875053469e7851751369038d724ee61f47876ad66939db2ac611792db60bce981484660b25c802eef24214db81d18f789aff6291cc6a78e0f1d8864774da8dac32cba1f196013e12b3c3142715caeef5643d1d99740ea0796bf835a61e1447b13dad402cddd8fe9989c134c2dfd6488418d2ccdfe3995da2b6c683c3a23d183e4b65b2ad66b93c6b8cd11e432491681e0836fefc79839d4876c9fcba877d5aa11cb7e2974e7fc2fda0ce5286f644f7028e47c49910e98d5cf03cb9c28bacf54d662c94eb57f94a2d37c844a6631d22f493c1c02c8abfa523ea24e6c626b082b09aa0c9bdf660e82c0fe0731f411ed0b2df8f1e1899867d974d8fd912aae161490e0e737d2863fa4a975d4f51c20c385dec2979558185ab25056790aec794bbd6df05c9852be26a5a42d5c26a1526af61af84a50fb2d11e88755c441e8a453a44c8831477c0245dbb72760cf2b3a4296303c793f06f9d71d5bb5e6717b3771e827a3539524c37b123df55c9e8b9a03505b9c8ceeaeb751b1d4b5ee84b37d7040aa07605a661e4783780c644e53e5aa182172b5c58809b74c59fbd67804c44439af3b288be6943e2f84dd9a5c9c7b61f1e6ec1e12b49fa02d7e9643e43f2f2b752653baa3d8ef184d2625ea6f0e445349d3959b69b1ce7d3ffeb184a65d9ba4d88f7700f7c3d6cfa36bb527c3f4eb74192098c8e3fbc1f52292aa6c28a8aa17fbe49780c2ffb73db4ffbc57d5fa3e9bcddfa4c5a178e291e136d5d1efc0f75ee7d40e9fe2e6152f1894cff70e78ab3ab7c438d0656e70d7e50e8e46981fa14aebd9a026c475b2830292c137c13d711de1db00c1cf432d8a062a31c7960d6c85fa0b3671e2268c102953ebedbe966a9865619e50b928c2752774548837ff48838498a2fd3f4b2fe640d5f603a7a1cb75f9f0a1317d210eac56a10170db9bfbc06e44dc91ce259cebe2898a3e47d4b2b39b7d8015c0cbd09bd4ee0738fc3de0f774cbbaefecef448839c991e370e2a4b76d025221b9dc6eca44ba8f612593e0c737002ec072d44494350d1095b6ef731c845bff67c790fcaa570f0b81d03bca9686e49ec13ccaf8f0d02f78d2db8cf71a40e061e112d1978d0cb7ca587f8fca937130a9f27a210d85655eba2037209226a824f110688de0676dbae33c597a81d64362d1d4afcb7df397e416bf3ba90cad78e3ca82af5ddc8cf7da8f52626f5385adc1c338945683d2337bff27e3b6d0f163bca3cbc9fb813e617fccf6da37e1270556bd37a2784f671a55d07b298a6a3e9e7ce3f2f86c5d176e969a37ec4cf570c18221e8ae7f66e9647e01d09b16dd91f1aabd1b98c8fdb9469870fbb97e469bdb3ed116398347e3d8c94aa6c3964131521158a99da441f55deeb81596ed52e4627462ad87d723f243501eddb40b3df8e9a9b5f4497c8c91ee31e3889a7a34adccc0848a4e5bce2b2e35aa671d4b9cbb7d7203b176dc6b256f67725d120ab86c40939a04ba01e9e5b431a23a67c4e3136707cc12a4499e4d8417e2607dd2c56ab62024e8d43e5c84d323e2a63045ef9bf6dc2bb5d070c19f8642513e67e5c1089210638d81679a918bb332644da00b2165528765b176e76408084ceee7da15b7c5725c85b1de2b99d33176db6f857199ec3e2723a513503576a89b699acbd555183ea2a768abf05fa92fcd5b745e69d74bc243f12cdb096c14954597de089cd79d281ca04224d8270d32852e912316acfc798f8b3ffbf86e582d5282a50c1ac5caf40e97f4cc8b82cb53f260b762624cd403a5e0ce95847a9344c0fa78b0cbab3cc53b8419e5676f1a78702a5d4d2dcf2b4dd544551ff6a21a366da7a5fe4211873761f0a0ba65a4ef004ae33fb6c2256f93b453e028cc2d9f4392c7cd478c1b1396c73ee7e9ded45a94ad9850f1ef4ac6b687eb78d0e8b493dea4b2e1fbdc7580959e6880c86191cffe142ccb5fff01e8f3f1765e18f5a649550cb2f417337d510f450286befc4dc3c229840e7901bddcb682c41392469953b66dd055f05cb5fcbd13d6ef2307e81a8d68d713a7784e38e3c052054437e73a39822fcbc8e416990efad747b0ad3ce713bc294eaef9ff9440f3e59cc3633aa6da286065734b1c03bab132038e6313c429a87b0d0f4bb842ade6070452e4f918668adeacadd223cef6ec535f357fe9f994155c115542bd56fae1d34c179fad078a7429a9a4e9080dfc630ec79d02cf6c64dc313de62f9522dfe1ff95e2b0c293a816e1d0929b249ad2403c2b041a0f7ebe2047d20b4075c4c98a11ba737acc053d1d4712849fbc0a4a40d54647fc17ea3e46c1fe7eb659e783461444ebeed0f8425b263783cc409583f7ab7748feaad7eb907476d82a9a841d22ea4c240b8064a523a756d3e4b8dd009f5702701619bc355d9e16448b53922773e347b0c28d2a6bccd0bcd4b00a5e9c7042b99fd6c29b6d9ecfd0d6e949692073ab4e2f15b6453401a3036466bf71f1c6a5c4c75c366b1db597e5d70c375b2add574553c3d9bc60924346e36463f7e4554eb2f4b18d28e5c1ff3c15841ee512e8192f68a1937e3f2cf364ad2ddfe5729b24f7253eade08cb9064dc051e5829d87a30ac00b5bfcbee7823d57abf9893176d6cc20647b158508cd4333de6f283fb20fd2b07fad543eb999f89eb67c3b004da3f621e2954575687b954053ca0adf8f96f43de9164d57e5ebbf418f3e914974e7cea990ded143259bddf9a93bd34ad6d8d444769ded6ab35ebc02f33e304c5b09d32af86614113e7498461daa6e64ec1827eb24aaf861e73e99f2ba0be8308ff3aca942928c3f98972fbcd698fe5012cf5baf461f18a71f93e704533a59af23fa6a4a7dd8796eb8101d05214276f4b5d9380a60b0edd8ee0b88428d08f56f01cd7a4d3cdd672437a5eabf319d46b7375b93eadbecc6ab158cc7212c1d2de0ea30c9dda589a73a687ba15eadc220d95837e75a5fe58709ec1f7a99dd55a033cf8b316ed3d084a53af5918810eda770387a28b0197ce2a064b47b1657ad661493114451997841699acaee3a5c0d771cd39abb96cfe920ba9f11207e4961c76dee5633f70c567b298923d1efd6b21d724909c97e6b2386e724f52d781e430d148602ddee53f45c0eb28569fc78b807ba5d167c4df7fea3315951f8380327f5ae3a325f24020ee93e23e6bc504ba28f2f45d4df9b7a3bd4e765cf1bfbfd6c1bf5fc8a1859591e0ba81c966b119fd8587b996f1e76cae27e9d150fe401bdfe42154bb84a4f241ce54a77045014951f306853487e3cda664833f4f47a9aca9039b7faf1fa6aac7659647ae663b16b953ea18c395fde94eabda9de6cdf081d1fb3e77e1dfe4491cb023da1d2f686d0397f7d8a15dff448903017e881d8f6ec07d2fdbfeb6fda3e4262a39fa1c900343dc04f2ec37ae6e518b86e5dff771c1a41801240cbbff944b076d9c1edd27164ccfe4e11f9163f52091562abc77b7de960e4944815292efa81a98eb567280ce84683c02359b35c9ca73315a7aa242079b4b8545e54385ee23d740cadee914c030d0784442f70493a5066cf29e3274c8edceb0316137e6f794b7ef98343c9c437d1b6f2ced0ce8ff74788be06d8995e4fd025b4846c9a17dcdff4bc11ae5601ac2b632e2d73a46ef91c7ecd8910f70a207d4fc05cfff2c0cf66a5e0ca24b15033c8e04b8755a0418ac41e79f761eab7ebc444619bf683ddb60d5976b9fb71004a941469c1b7285ff47ea4f1482914838fc6a8804b05621bd2afb468bdd340099333bf0a5853d54ac604ed783067c2f51d621daa7ff7a01f6f8d5220e9ff5d24df3b1bd84a28251fdecbb963f83b86afc60400cdd94267ea0fd7ae50573d508b6b90d11d0f70c542aadd210e43317d80b94f5b17d167ab4dd5dd11cde096e5802ef0d08bef19eb074703f7131dcd6ddbadca7bf5db78267da0b67aeff2fbd2fdffac4f350ce092ea930033a3efb0bbe80845e53df5abbf228453563b4470d41117578b82ca01ba91157f114d0d0ae75929a2da9d618d97a67de35ba1b3466143acafac94953b9b6cfca34e0bb0e51faebc4fbddcd5a0affa5f956d3a0f63738990443fded1ba6c4ebf34aa6f859dfc2eff8daa60220b064c7cdac91bf5983daaa3bf2ffbc9c9413c811be2a95c376e0a9acdebb9fb53bd82c12069685e93192d8b5c03a9e3dfd6350a2d36308dc8077b4492239af5496db7eae1085a35efc157e946828be3b837af7b40ee97d130343c933d8d90087e4a03850d80c1b00c31b2bd799e8ada4c4d90658e4b6ecc57b300c2ae031156ae132fb7bddcb801f03ed1a7ab188ceef2b77987b51925b76d78bb5ee340974a360f8d6b3d8ee90a17bca32f8b050996a9085bc9b769fee669914dc6cface9d6025f9dce8a8bbe3c9f56ea6631271fcdd2d6d2f7e3b28585da93f01f98b3c3a813aa15b87b9cd14e7aaa567f73428cada42fa641e8547412a8c2c359b5f8c44a6bd1482db3f1bc1edb9fa95a62bcd7d3c67a0069faa7522ceda25d27f2808bfbbb8a11a326fcadcd0e88a2d37a18730f9b944747df9961ca494a04f2d0be9fa067bc8d4264a4ef2cfec8510f58fce4511da862368ed251834a73511d91c6cd9045d30a5f30a8ab6b123ac8705248e5e4dec911087285b02973024f15da241e817b6bbd1eb8af356d2a7c923cde874e3a7ccdf1fb7121d5f387a005d5a879f2ce56ddc7513505716307f9e34c2f0150081079b96a8c4bd21a889876f28aa2d77041f6de39db854995cceabf3e975a9b03c20aa7a0c69ea98ba97a03b5e2260297f450768971d3a48057d8929c6ecdc0a43bfd3d15ec1e8b810a62b29b65b138376cc6b4fa982399e4e7bad91ae437c3c504fde7c83f00fec60535c94b34001e656b6df7e3c59c5b998d304f0dd48715c6962786b4f232ad92edbd45f19157ee13be96f4ddb519a9c43dd3da4931ae8f590cb57bc2edd4298c282dc7deb9b81ef0586a253dffa9c8e9c1f416114c8c9096d282542541d905e3d91dd4955b0c4338a2618a3272dbe444", 0x1000}, {&(0x7f0000000340)="ab198407fd58b076eb54e93cfd74a5c0255f787c97a833b7d204cb56c4b5de894b57335caa0605580740cdd6a197448c21dac009ce5314fec7eb4dfcde4b3b55ef91157d23bed25b6c854952a148ccad6d42a8b14916f1c2657c7e9f9aca7a22afce6e15f44e6ed72ca2978b12f8133676dd0618f6b3c9697ba4d629a33ead913da16e48e140c8906b63960a0276", 0x8e}], 0x3, 0x0, 0x0, 0x800}, 0x20008000) 23:31:14 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000200003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:14 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r4, 0x63c0}, 0x8) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r7, r6}}, 0x18) 23:31:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14190000", @ANYRES16=r3, @ANYBLOB="9917000000000000000010000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x50, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc4a7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3fc0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000300003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:14 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0xd) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:14 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000400003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10000, 0x800) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x100000000011, 0x2, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba7502f6c59e7f202738f6e3d2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027eccaf3f6db1c000100000000000000497400000000000000069e735ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) sendmmsg(r5, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)="86695a361aedc8b7c4b983cb88ca", 0x1000e}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newchain={0x64, 0x64, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {0x6, 0x2}, {0x5, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8000, 0x8, 0x1}, {0x4, 0x3, 0x6}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x1, 0x6}) write(r0, 0x0, 0x0) 23:31:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000500003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x1ff, 0x0, 0x3e00000, 0x1, 0x20, 0x40d0}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x1f, 0xa83}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r3, r8}}, 0x18) 23:31:15 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080)="abdb931ad26987a8064c6a056e469bbed8f4224b209995040114455d7d68eafbe05a872cc71f5dbdbd5ba7a659810981e473e56f704b5991b456fd646eeb5c780116732713bdc860a1cf8e8c74c361aa7e1f9645fe135bb3af0dea1d58a77ef0e0ee2c3ae9ebac7b7453e84aae2877ba46897cae3234d6f762722d87a19add8874fd872037a0a76f655ce5484fc5", 0x8e, 0x4, &(0x7f0000000140)={0x0, 0x1c9c380}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r4}, 0x8) write(r2, &(0x7f0000000240)="b63db85e1e8d0200001dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a000000000000000032e582637c3a28c28adf50740f98fe5280547a9e45cc584125b036ef30ff9eb9255a07299bf8c1f8843de0c1c2a972210538b8dc400f2a1a82d667be3c109a54c4cc8fc4d29137b7950504c6d7c3f8d3a4fe", 0x35) 23:31:15 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1018.827474][T21410] QAT: Invalid ioctl 23:31:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000600003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:15 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f00000001c0)={0x0, &(0x7f0000000000)=[&(0x7f00000000c0)="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", &(0x7f0000000340)="f2b23ea55b4912b75cd54c5387a17441328ffbc14e504683676fb12acb62ff4b638da5b82b4f1b7da06d92bee00d0b606ae2f79c2373652ffe090c1fe2f5cbb85c3cc5714542792e7119af4e29b7a5", &(0x7f00000003c0)="d7c3982b264c6ce5f4c4ceef35563c866179a28dd7c799b216b7ad0499d30d8959c7dcdd41ce3700ca296df1e7fff0b73c2db527afe3b87f0465d54b7c49f5f82efa6d0adddb25561f09faae04dc233ec13a3fb16b21ab1fa1b74e458fc723b9086cd716f9b3d4726f48f4ea7b"]}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) 23:31:15 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x400000, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) fcntl$dupfd(r2, 0x406, r1) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$inet(0x2, 0x80001, 0x84) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000004c0)={0x1, &(0x7f0000000280)=[{0x0}]}) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0xc) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000500)={r8, 0xa}) ioctl$DRM_IOCTL_RM_CTX(r7, 0xc0086421, &(0x7f0000000100)={r8, 0x2}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000300)={r8, 0x4}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r5, r6/1000+30000}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write(r4, &(0x7f0000000180)="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"/347, 0x15b) 23:31:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400204) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x81, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000640)={r6, @in={{0x2, 0x4e20, @loopback}}, [0x3a, 0x9, 0x15a000000, 0x0, 0x0, 0x100000000, 0xffffffffffffff81, 0x0, 0x100000000, 0x7f, 0x401, 0x80000001, 0x5, 0x7, 0xca8]}, &(0x7f0000000140)=0x100) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x3abb40, 0x0) fsync(r10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$packet(0x11, 0x3, 0x300) r14 = socket(0x100000000011, 0x2, 0x0) bind(r14, &(0x7f00000005c0)=@generic={0x15, "0000010000000000080044944eeba7502f6c59e7f202738f6e3d2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027eccaf3f6db1c000100000000000000497400000000000000069e735ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r14, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) sendmmsg(r13, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, r15, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)="86695a361aedc8b7c4b983cb88ca", 0x1000e}], 0x1}}], 0x1, 0x0) bind$packet(r12, &(0x7f0000000000)={0x11, 0x1e, r15, 0x1, 0x1f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r16, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18) 23:31:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x88, 0x1, &(0x7f00000000c0)={r1, r2+30000000}, &(0x7f0000000100), 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0xfffffffffffffe86) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) sched_rr_get_interval(r4, &(0x7f0000000240)) write(r0, 0x0, 0x0) 23:31:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000700003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:15 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x100000000027, 0x2, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba7502f6c59e7f202738f6e3d2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027eccaf3f6db1c000100000000000000497400000000000000069e735ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) sendmmsg(r6, &(0x7f0000002e00)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)="86695a361aedc8b7c4b983cb88ca", 0x1000e}], 0x1}}], 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @dev={0xfe, 0x80, [], 0x33}, 0xff, 0x3, 0x9, 0x400, 0x9, 0x200, r8}) 23:31:15 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101202, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x40, 0x200, 0xfffffffb, "4bfa0f60e7ce1dedd46236f23b26d028d47c284c10ba6d3aaa208610db297634d4329a33aeb0dd4e5e33862c6de054edc5a4fa1d19f0b61bb901630166200192"}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x8, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xffffffffffffff00) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000900003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000d00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r2, &(0x7f0000001ac0)={&(0x7f0000000600)=@ax25={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)="1ce9736cf13372cd877a79c8b9f6659480379823ffbae72f1b5f59cad2fe21b802b79b323e6704386654ac4870f21f505b8aaed9cd361240c7be46c3e2ad0fa56377c9c023d36e702d5bb06d08691bd3ebbbcb4885ee1e55037693be21e5aaf1676c15d26aab29136b9769d1bb700ea6ae375b54e0b6e26cc6a3a8efb64d9ddc033befc7d69f607cf083286f85ba31f3f7e6563e086a680963fd8edf9ac57d603d3480d29463afc39a53be0293c9825ad599f7ffa7c286a1c6a04050921897b53f649b987d1f3fc54f9c82fa", 0xcc}, {&(0x7f0000000780)="fa87f1720a030af86d82e547e1626dcd867ea4779c781ff02d0e3226fcc0c2979d6d1db3f6a029ecb27844858324f003a4e95fcad2ae958a6486d879f1bc568dd9213d0ae266c51a66e70f7699e08b86f67c3f9d1fad7946fc1fc7a2141cb2341ed4e3ba37727114a3f1e8ae8c40208905cd0c00e6d95ddd60bfce9a174be6d2243542052032e05f02b41afeebe658ea97907f6eadea149f", 0x98}, {&(0x7f0000000840)="05b0d61254fc164417d07f3fb8df8d0dcc51b20eaac35ad8810551e44adb739b1706ca81a0616acd5c88d640ba0b90be1c0abb3402cc0faac5dba7fc4f1239c577f98e7a7c5526db67285852e0741543499813f958707b2aa7871448a2cf7e9c7cbce2e8a31f999a40fa550b81d24d87d837c3a30541cd526a9c0029108bfcf7ecc1dfbeda5d0d2b1f364844cf3c80eb835d5e7c3567ba1c9f7b7a288c073890cb340c62fc919e29412d3229b3fa1f6e105eafa2a9616159193806f460b4943d5ab69dcd404ad254787f9f7c5121e53f104fea4d808a9e3a", 0xd8}], 0x3, &(0x7f0000000980)=[{0x1010, 0x102, 0x5109, "f6d04fe05761cfb75c466cb3ef0ea9aff753a5aee77d2ee2b8e14cec6bce28a36e68d244bb146ca2d7aff7cb57b4b276563783771f333a553c44d15e064e08b24e3c63251299ba5ef9b3da2703d8338e7f5c45b0e766402c2473d608ed87dbf34acac6525389cc8498de396be4c13baed1d481664c0b7e14040921a006a7d67e873df7b46873278b320980c5a75a89611699b687725576f65df1f496fd2823907307683274898bd787865c1e18918dfeb499f80869903eee1727e0d70b00b21b473e01ca53a878e15e4ca3183cf639c1bf4c71ee0397a1682c1b489d3152d3631c42fe61e39adc1fbd236b53beee4af0f09e90aa60540b3bd11182ebeea75130c9517c35d4b9eb99fd2ea17605f6eed0998c5bb4672fdac174b3d446d42c188b16bc6e0b96f6f4c7c343674269aa6c4850e8aece6483b780bf89e416a03a6ee9e8c84c266908e2c6965dcdd62b134eef8bac19c3e4e133d2aae086fe5d46de54c05fbc476502652b137c5e6e996df688de5f697a642b8e7d5aab32368228d90b2d108d60f359d8d0c612b3e5fadf29dbcf6b88d228048a2d56b4aae12f75b711385754c117317281b192f3c1a6a7eeff3870567b6b3a0084660103b244f4f8b65606796c1dacd9d6011180515236a739308fe0d049ef2434c447f0c2b1d6363416cace433c8a70d92ccf208a6b83bd706345538a5edb879dfe7bfec861ea0e8039346ecc2b4cd8689a4d47e9a50a47cdabf2de846d658520a6602a33142e381c02c34056d4d53f3870165c35a72d4651920b1d22a0d351aa659083b115bd22ebe8cd39d0b3a393066b0c0a6eb4da63977a6b23c18d80e02064687964fa29fd45c0db8d7125b49890191793750d06f6d5a8650da3c593e51d0c5f69c93dc21164f1b0a4258fd0ce652c527689ea349f2f43b187ac932daf15149871ba340391771833909a6be26384e130dbadba6303366e7d073c28585d96f5889be148819a39cafec2a90438be98639f6ce8747fa2ca8ad76cc6789bc1dedf23b187f929b42e7727444944707b563e440c971d3a374dcecd524199b381cdcb21661db38f133077cc78c813e9b20e245b991659efe8c219323dd75d693af0907b2553ea57258e0cadbc312ce546e36c4978662a4ef0f76974b243ee763e6c54b9b48d877b916294906d01bd7cf20eced0e442a05fae138a78789a25bedf6418edf7f816050b2de8f7a0f87b791ade4e06df7e5be9fa97d21b90f4a1ff750c43ed5d68a226920c921671a39ab95ba86174a1d274aa0a624da07e08a846518eef116817c4591d87f790d8f1b476f44573e16f9ccd83f31c2432f7757b9fb50d65672f38f498b7c3952ac56c3e8e83701353f6344f3f0a7998347827d592b6194396d6ef114d8bd0da17376020516c88f19309ac662305849afff96c4dce9dd20ae8263b0dd44c70a4228e6a720b343360bfe20cc5a18f4ba1cd47e403136e190f270dde0a52a53ec8939f5a8436403c0110cd78899290551eed7d0621511a0b2a5d0c293d608207c238b7efce5e4f6a3b7543201145ebf5a8e71bcbdc441af089cc99452daedfe847f944a3e6fe2779b25fd79c025dd3b71fc77b0d5d0099c03e793af3ad9306fd5a127164cae138e6239f220596e8772417b0391177eb63c038e526b7909796f22f877132ac3c4cbc9af9801cf228f097f31b526671959659aeed466ac6cbc8b3f7b1a31c29142fce24f9dd3c3fea6d5f29a3cd8a0023ab90cf7c1d34f661a3fc293d5908f7a4f8e36bba20c023b07dcf8262c4cb8ecf678020624d3daff89b1db72b9a644fb1537e03e696e09f100bbaedab5eb7c2cfa22abbfba02a8e60da594a63774b1cc2acd2b97c0f815dad1c2f15355917f64615205fb398c7a13dc1077c6236c2769da7585037f42a6474ad50d4157951a24f2b1b8ba193f6af257663c220b02eb58f523e4b23e2f3341570f91a85d1a20c20eeb7f5d8b2c1f327ecdf64dcf8a8f3a4e4060ab6e064419d8b6f710c555fda094d8c9fd82daa80284b0bb585b1f68e69f931911c28c6163faa206aa82196f18ba065a992f29622fe56d98f9414cddf8b73e5608d6ba154c1629bce87a6441b9e2072bb82617f63d2f700769a4768435bcb0d04714f92de00c3f19ca846024e4932e8f4d4d2e5194138745f5b5378418215da6290ff1bc0a214bf4faea0160304beb8e6331f8a7856d4a0e4b2189c45463fb57db22ff06999d9738ec28a4dded2dbf0688f6b20cfe97ef7474d95796962ce06b3685fffeaa6c15c0775ce8490146fb240767202ffb1e55172637feb5dd7828cda6dae58983e7117300904b34224a961655901ed45da54398cb9df55d94d5cefc8c2503b54847d0acce2e21afa0daf0f6316e01dc5c3a44da729fb24bd2a738801e2f83ff06c1ef3f3d0508e3aa95a83fd2b625574f627f21aaf4b0794180553c4812ef5f4f5b575a00aa271cd794bb15e9a8119345abebcad40ec712554844312de87f868daf70fb1afacbe53a71b04f32b28e02974f3f3780ddaf23e9b06cde274f1c40d09d92b90b1c1c50dd7dcc3c7a8fac6e689550c70f3cac92a33d3e3b1c3705e75e6b6fd44b23d18bff1d60e329be626510d9502b1e7cb82f1d7b647ab884f8ed04cb800590b182449d0e2ef6901a60ef785c47987a1da1e35e4927398d65712120a6cd2fdd01a42bbff013e877a983cb97298bb7ba8552175eef662dd75da5f9a62096a6fe5d1d59cee6dbca36189f179168cf96c02a459b7a265ff465841459272147962217b9e73e945ff2994d9a76466cfe013a3ff061d8ce7a6a6e01e976be5ef4177eb51582882d0fa2b7743221ce1d5195299b39516b27f55683effc3b7bfca30c8039fc77a73e0241b40890820b3e6ac9462a63b284dd8ad201bf13e1fd4955d9b99a3cb7edf00b05fd40b14c264e368c0a47fa05081bc3c5133494e87482424941638e6684aa68f661342d3306ce72c988c1a80748bfedb80822ec52714fe32aaf7ea19cc24bfaa1c7d6d69d008c1185bad8459a65eab4580681d66b10c44132827b7de23f49c78a6b761cf68e6ab5085166c5f88fab57ff0b76b02d692e6267e05f634f450de5ef24995aa48195951b7045f3a376bf52124026073973b72936f3b87356d2754a676b95a40f777c486dce20cd876f5751f6cd7ed71e6d57e00e91856412ac6ee4dffa7ce6471bf1f7cfb56412aa5847299bc7bb397a69aeba1fc34b3aea3c5c1e36c495cc4865c0d725ac4275df2edfbe207137f7a753ea7d97de5f1e0e483d0d6d88371663546c6af0de6a138e48332c4318ec9ff0978d9837362164c1a9c321bd7d24d7ea94604d16480885e3aed8eb86eee0babad287c98dc454b6e278f8ff206a86357391a07773f85ea28b4d2f1a21f0d427b73a93452c91c729131822272ed7a2e03ef0719b507f3f1e211f6d84e3c1616d6b61fe4ef03c22f2c515e09e71bd7debd0f6c95970e4988e80baa9889e742d766f60119b35dcf28a80b1a5b5e23cb1158f95bb4f9354959bd19ff9aed7dcdcb6d4b634ac256f624c8d87733fd9a0514a6e47e90f9a93f39cc302029ccc2da0669c77b2a8e62cc2cdd19134015fa466d2cae329358a4a08d6b5009c5073cad8fee379bd57093d5629a4637ec2477e0bbe3e0451fba7c7ceb0f6dcc2976b7f71adc4c24883e9a5e3fc9bbb47d5e3c74b0e6e0df922b1c27f82cff99f19b5ad695043d7376cdd5044802d11b11aaf9f8f72c5e93d411fa828073bb003db00df8e6822cce78a310e3506807b48250762a2104df5612f4f648bdc312eebe73a636c9b64b132badcc3fd9592db7863e617fe947439d4c7c7b1e43a3b85039896a499c05d20e9e408ff862540ccb54b40755aba86fb8197560e129cf07b65fdbc74031c2643d6fdd21ed287cb1b67840a5de9d3454f6b4cfd9c356acc28df724b50607ea39caa50eff9f732d1c0e7f1b1558844f8220cce192c10764480e3465185bba046820c603932cd5fa92a4af3cc197ee8666fc21b153a0aed890bc5759fc6451a2b95f4508d3d3be16d65c19291e855c8b9c6ba18394db89e54d2e4e39d9ef0b5780cc808e60d0d59bf2c07d5ee5b79b1c604be6d092fd613af0ccfe18be78726c6a066c52f6ec6365f78cd716337e5f1cc9f27d868ab11b35eb3a79b3de402a2b7cb9da85570d95d75f450a9646f3b473fc50e5902e549d1446bb70f42c6d2a966fbf3528c2c78c6b3347424031cda1d520da85ddc579201626fe6d74c149d11f52a40ae392d3735a522a294d56f64321ca7df276d012cf3a738905b457bbb4545338e6b79108f0a70bcc7513fc93c31657ce62b35788887fd7b598675dedbe7b509cd32ab0bb6a127fa36d573029b3b3601c1afb4dede9effa2c922c0a8c0439e9b0be78a877688650c4b9f25e100b35214959ef480c9fee37ff28db0324ee2307c6f90350c1b8a2f88e444880461cba8a1424252eee3b25a4b8c8b90c74a5d2b735bb79a6f497a772ddf175f8795c53b18ac1e9cee2fbd13120028e0e4e5bab41523017e5c97bd6e96898b5278f270b0a0fe5f7ac4f3a957150e1646cdbf8f2e7721eba9476566e30576569ec2399892a44d030ab423a486b71f84f391850cda4987d96c016e128cba94fe49ee34eb1756499012c4f968648119ed08420ac8f35f52bbfb5aa6cfcf2f9c866334003f7f1a0b562d6d5aba8f74556df5d99989525f50ff1acbadc944b2c699fbc09952d336911340bda8b72c9df7f359762ec18f1d0fa3ce875699aa5736d370aa7c058309d7f973bfe242b1348e96ef965fb4400c658588fbb3abcfdb61b3d3488737144d3a78cc5582501b12cf45ca43a4b84da5017b85104e9cdca54f58950fbfa0bced9e70e1a54cd2864ca36edda4a1c15b2f79294bc8df8d12d4a4a20146adaf816e2d6c5f36eaec90537a271a533e6a8d78b9d45c782eb2d55efafc61b07f8593ecd43b0b8f5b1463a2e7024e25e90048f9796c71c0ea732d443872cce983419c0211f0748dc4bcd62455c2e25c80ecb6a4fe9f00fc127f5cc52a7e4c43993a9e01a855a1352beb2b762edf4d45ed772b727c877296340dff0398587adfe6fb96fabd3d56bccd10393b9a02be98d28e7d23e4ca3077e34dd9cf32cd52bdb83b796e347ca4eb7afdd24aa28c4f3bffb1491165411a02ca52ff7895ce502bc7c5313627ab0e1173b1271961e782af203c40d18fd58472f6ba4a51e84258657edaca1f54c64a53af3e4fa5c80ff155534e3bc8d518f8683db1eed1dbd95fee57f3d5f0be7daa15b7b2fd155264d45038de1be0fe52686ab11a657498022b8c1ed71bcfcb1cc3402a78fe51da8bb3ac1dab08ef947eaa44f9d23232ca4689e3eb1428e508065a918dfd953d7d1957a2943756cf13904d1c3b33535fafa84bd4cd419da4f47964049569946adb713c0bc2b7a1bfed519d069c1ef0a1dccda186de701b7885773ba64abac50e988bea0fdcc1352ec4194eb4df49cade29d3f0e373e9e4b6b3f78f39e057dee3ac3b0f5d86bb8acc1a2fc74bab4a2d6ec115c05f6b6edb446782be64bd59d754e69b97f9b52a2482354266abeac863edb35da82c020372d1e4d0932d2a2348324541c87736fde7d9b3135da0fd5995768938ba7d6ad64803b258d8daaaeef67d68cb6fbfa2a7f03b7647696db1778e6ec935ad5b974d2b4669caa7eacadc2d34ca5245c0445c8c2d4b502d01ed071e3dba7f9b635cda9897608613e727801ee5a1a7fb2ba54643a21e43cf2a2e90c249df8e6ff54215a5742b72c"}, {0x88, 0x118, 0xa13c, "950e182b76ac88f574d31bb81669475fae8d0f82b0fc1e7a42af38a97277994d4f7482629680efd7155757d5178d3571f48970371a56e10a10c3071d02a9ee355b4e3a1b93d1d0951f88e989814bd3321bb64f336d6c04c4e1e6badc696d147dbea18e272bc6d6fbd616b7ee54c14d1cf8bff33bc13f3f"}, {0x98, 0x107, 0x101, "67b03e28aff980f70b2a06c2c46580ed8aecf944802d864aa3eb3e7bd54dc5b933daa678c3bc8e72784e3ee27e67468dd1ed890f0465be4dd97d81eab2bfe3daea5052e157712c7c4ab1e7be0e395a3dc402cbce64dabd4eeb188936da058ee41a91651fabf0196432f7b37021fc85986ed1ba624bea3de98d35e06a3d693ed88326e401eefa2461"}], 0x1130}, 0x40000) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x100007, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @loopback}, r6}}, 0x48) write$vhost_msg(r3, &(0x7f0000000100)={0x1, {&(0x7f0000000000)=""/14, 0xe, &(0x7f00000000c0)=""/15, 0x4, 0x3}}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001b80)=""/234, 0xea}, {&(0x7f0000001c80)=""/199, 0xc7}, {&(0x7f0000001d80)=""/248, 0xf8}, {&(0x7f0000001e80)=""/59, 0x3b}, {&(0x7f0000001ec0)=""/193, 0xc1}, {&(0x7f0000001fc0)=""/128, 0x80}, {&(0x7f0000002040)=""/131, 0x83}], 0x7, &(0x7f0000002180)=""/197, 0xc5}, 0x40010040) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000240)={r12}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000022c0)={r12, 0x9f, "5bedfb1e2f8cfca989025517bd4812cd25640691b6811925be9d9fee6269ba977a346ec7a3a3a77af92e18dc67f483203604491f659abe279fb7cb332e2221e41a39a3bf35c41862bff209d7cea1179f54aba6e73544388fa775447cbdb616a5995e2aa3afb083219681d98e6cc9f7c7af72bf648ba5e76e133bb01ea963b010e0e8f76c83a02826c2b27b5876bc5e81e18aaf8ca29f2eca9628384f98dbf7"}, &(0x7f0000002380)=0xa7) getsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f00000023c0)=@assoc_id=r13, &(0x7f0000002400)=0x4) getsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000540), &(0x7f00000005c0)=0x4) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r14, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000500)={0xa, 0x4, 0xfa00, {r16}}, 0xc) getsockopt$inet_buf(r15, 0x0, 0x23, &(0x7f0000000340)=""/139, &(0x7f0000000180)=0x8b) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x106}}, 0x20) 23:31:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4273, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x200, 0x9, 0x4d}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r3, 0x6, 0x8, [0xc7, 0x2, 0x25a, 0x2, 0x7, 0x3, 0xa797, 0xa7fd]}, 0x18) 23:31:15 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000002000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x9c0000, 0x1, 0x3, r3, 0x0, &(0x7f00000000c0)={0x9b0970, 0x4, [], @p_u32=&(0x7f0000000000)=0x26ff6938}}) r7 = fcntl$dupfd(r6, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r9}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r9, r8}}, 0x18) [ 1019.773484][T21873] net_ratelimit: 28 callbacks suppressed [ 1019.773495][T21873] dccp_invalid_packet: P.Data Offset(101) too large [ 1019.832751][T21873] dccp_invalid_packet: P.Data Offset(101) too large 23:31:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80000, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 23:31:16 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x2000, 0x0) write(r0, 0x0, 0x0) 23:31:16 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000002300003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x37, 0xfa00, {0x7, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r2}}, 0x18) 23:31:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x452040, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {0x11}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="22647a52e417c58c3d406701282f31c66af114db93ba00bc177d9b80909cc054f46ebadc7b097677ad0148721e36cf51be8753edd4c3d07a3a7d12cb5477d8c37c4729695e666762e700ac7593b064e9a187405b677ce1", @ANYRES16=r6, @ANYBLOB="00022abd7000fbdbdf2511000000080034000080ffff0600280001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 23:31:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000002900003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000003000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1020.172948][T22101] dccp_invalid_packet: P.Data Offset(101) too large 23:31:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000180)="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", 0x14b) [ 1020.247301][T22101] dccp_invalid_packet: P.Data Offset(101) too large 23:31:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xa4, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x149780, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000080)=""/230) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:16 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500000008ffffff8d000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) [ 1020.339486][T22115] sg_write: 18 callbacks suppressed [ 1020.339502][T22115] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1020.339502][T22115] program syz-executor.4 not setting count and/or reply_len properly [ 1020.363162][T22113] sg_write: data in/out 167162/283 bytes for SCSI command 0xff-- guessing data in; [ 1020.363162][T22113] program syz-executor.5 not setting count and/or reply_len properly 23:31:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000004000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1020.514967][T22128] dccp_invalid_packet: P.Data Offset(101) too large 23:31:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1020.575317][T22129] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1020.575317][T22129] program syz-executor.4 not setting count and/or reply_len properly [ 1020.613620][T22128] dccp_invalid_packet: P.Data Offset(101) too large 23:31:17 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) 23:31:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000004800003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt(r1, 0x369, 0x1, &(0x7f0000000080)=""/72, &(0x7f0000000000)=0x48) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) [ 1020.775568][T22243] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1020.775568][T22243] program syz-executor.5 not setting count and/or reply_len properly [ 1020.844405][T22246] dccp_invalid_packet: P.Data Offset(101) too large [ 1020.897365][T22246] dccp_invalid_packet: P.Data Offset(101) too large 23:31:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x82040, 0x0) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000080)={0x400, "a1165440eff4f722ff40be48b65a6e8e7b001e4b115236b0b84c81e332570bed", 0x10, 0x7, 0x2, 0x4, 0x5}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:17 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff0200000000000000000000000000010000000065000000080002edc8000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000004c00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000240)={r8}, 0x8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000240)={r11}, 0x8) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000000240)={r14}, 0x8) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) r17 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r17, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r16, 0x84, 0x11, &(0x7f0000000240)={r18}, 0x8) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000001c00)=ANY=[@ANYBLOB="78020000", @ANYRES16=r4, @ANYBLOB="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", @ANYRESDEC=r5, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYPTR=&(0x7f0000000340)=ANY=[@ANYPTR64, @ANYBLOB="4e5259b49961c113d8e98433fdcec2162554f16595347717acc77756c0ec03efde41350b13d5fa301b1667b853cf40e81e2d67fdfafa7851fcaf48094d363c80735b1900c6fd6c3671e65ead1f0b9cebae5cbe99a34d8f2782229d4886d4210d3a109b39de65462aa1bda326ea85e5394dd467e503323a1e4e0e97ea5fe970bf33a96c1c0b9c5a6f913ff5", @ANYRESDEC], @ANYRESOCT=r3, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], @ANYRES64=0x0, @ANYBLOB="bd6007492c213d771ed87e7a6ef053588f27247064092893fee58674da25bc167fb6e34738f08ce82330cc219223bfab9643cb8c1ee293eaaaff5c8215c56caea0cdef62d710d859644c655d1d0bac6e687859a39c55aee67a93d9e0a6a27ca1fa4d5635b2f5181ac69ac1128b1a9a1ef1510b7ab4f4c4247ff8db26ff630c221d1918d767f986e089d234ec6e1272814100fc91d2020f90d3412460731e38f33742b369e988cf3def9800a1447365041e266e63169d01e60a88de184baaa44247f9d5a93a1574be0b595a901458180715311097"], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES16, @ANYPTR, @ANYRES16, @ANYRESOCT=r8, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT=r2, @ANYRESOCT=r11], @ANYRESOCT=r3, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYPTR64, @ANYRES16=r5, @ANYRES32=r12, @ANYPTR64], @ANYRES64, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRESDEC, @ANYRES32, @ANYRES16, @ANYRES16=r15, @ANYRESHEX=0x0, @ANYBLOB="1d17e6c9cc", @ANYRESOCT, @ANYRES32=0x0], @ANYRESOCT=r18, @ANYRESDEC], @ANYRES16], 0x7}}, 0x40048051) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r19}}, 0x48) r20 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r20, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r19, r2}}, 0x18) 23:31:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3}, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000240)={r6}, 0x8) r7 = fcntl$dupfd(r4, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r9}}, 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r11 = inotify_init() r12 = inotify_add_watch(r11, &(0x7f00000000c0)='.\x00', 0x1) inotify_rm_watch(r11, r12) inotify_rm_watch(r7, r12) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r9, r8}}, 0x18) write$P9_RRENAMEAT(r7, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000000240)={r15}, 0x8) ioctl$EXT4_IOC_MIGRATE(r13, 0x6609) [ 1021.173953][T22349] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1021.173953][T22349] program syz-executor.5 not setting count and/or reply_len properly [ 1021.185874][T22369] dccp_invalid_packet: P.Data Offset(101) too large [ 1021.227316][T22369] dccp_invalid_packet: P.Data Offset(101) too large [ 1021.257835][T22374] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1021.257835][T22374] program syz-executor.4 not setting count and/or reply_len properly 23:31:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:17 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500000008fffffff5000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x305001) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x40040, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) write(r0, 0x0, 0x0) [ 1021.327809][T22387] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1021.327809][T22387] program syz-executor.5 not setting count and/or reply_len properly [ 1021.349821][T22402] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1021.349821][T22402] program syz-executor.5 not setting count and/or reply_len properly 23:31:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) rt_sigpending(&(0x7f0000000000), 0xfffffffffffffea2) 23:31:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000006000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:17 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff020000000000000000000000000001000000006500000008000008fa000000002a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @loopback}, r3, 0x8}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1021.518412][T22535] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1021.518412][T22535] program syz-executor.5 not setting count and/or reply_len properly 23:31:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18) 23:31:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000080)={{0xf000, 0x5000, 0xa, 0x1, 0x0, 0x6, 0x4, 0xe2, 0xe0, 0x5, 0x2, 0x1}, {0x2000, 0x0, 0x10, 0x3, 0x1, 0x0, 0x3f, 0x3, 0x6, 0xf7, 0x3, 0x5}, {0x1, 0x1, 0xf, 0x20, 0xfd, 0x81, 0x8, 0xc1, 0x80, 0x3, 0x8, 0x9}, {0x4000, 0x6000, 0xc, 0x3, 0x36, 0x13, 0x2, 0xff, 0x5, 0x7, 0x8, 0x4}, {0x3000, 0xf000, 0xc, 0x8, 0x1, 0x8, 0x1, 0x0, 0x6, 0xc7, 0x48, 0xfc}, {0x0, 0x14004, 0x3, 0x5, 0x0, 0x7, 0x6b, 0x34, 0x1, 0x1f, 0x6, 0x3}, {0x4, 0x5000, 0x3, 0xff, 0x9, 0x8, 0x80, 0x5, 0x3, 0x1, 0x0, 0x90}, {0xf000, 0x4000, 0xf, 0x0, 0x5, 0x5, 0x81, 0xff, 0xe6, 0x2}, {0x6000, 0x100000}, {0x1000, 0x1}, 0x10000, 0x0, 0x10000, 0x12000, 0xf, 0x6000, 0x2000, [0x3, 0x0, 0x100000000, 0x2]}) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:18 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1021.675924][T22602] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1021.675924][T22602] program syz-executor.4 not setting count and/or reply_len properly 23:31:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r3}, 0x10) r4 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000006800003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x48) write(r0, 0x0, 0x16) 23:31:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:18 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x620000, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SVE_GET_VL(0x33, 0x4025) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) sendmsg$xdp(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="42a8e84322946cb885d187a795328cf851eafa7d5727031544aef13ed8669c20d4cd98d360eb5afddd2ab3c911ba5eef5871aa2c634944fade9e9e999eb0881dde8982036a4b8b2aca4cf0bcd2e0ad642784b775665d47c2f1e988b742f0459aeb9c4c091ac43d04ae4e32072b113300136bbb", 0x73}], 0x1, 0x0, 0x0, 0x800}, 0x87) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000340)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400), 0x2}}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2335, @rand_addr="2d1a7ba636eb9d0129a45e2699ed8961"}, {0xa, 0x0, 0x10000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffff7b}, 0xffffffffffffffff, 0x4}}, 0x48) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) ptrace$setopts(0x4206, r9, 0x2, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x80, {0x20, 0x5, 0x1, 0x8, 0x1f, 0x4}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x400180, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r10, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 23:31:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000006c00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:18 executing program 5: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) fstat(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) setuid(r10) r11 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000440)=0xe8) setuid(r12) r13 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x408000, 0x0) statx(r13, &(0x7f0000000540)='./file0\x00', 0x2000, 0x80, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000000000002d12f755791d367bf9d46ca1bb880000000002000500", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r10, @ANYBLOB="02000400", @ANYRES32=r12, @ANYBLOB="040004000000000008000600", @ANYRES32=r14, @ANYBLOB="10000600000000002000050000000000"], 0x4c, 0x0) r15 = socket$inet(0x2, 0x5, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={r16}, 0x8) write(r1, &(0x7f0000000100)="b63debe9d57500003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22ca5db0096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a000000000000", 0x48) 23:31:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000200)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000007c0)={0x3, 'veth1_vlan\x00', {0x6}, 0x6}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x24004801) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000180)={0x2, 0x0, 0x19, 0xe, 0x1fa, &(0x7f0000000300)="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"}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = accept(r5, &(0x7f0000000080)=@ax25={{0x3, @null}, [@default, @default, @netrom, @default, @remote, @rose]}, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 23:31:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000007400003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:18 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x105, @loopback}, r3}}, 0x30) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000000c0)={@multicast2}, &(0x7f0000000100)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x4, 0x8, 0x801, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x855) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000240)={r9}, 0x8) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000240)={r12}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000001c0)={r12, 0x800}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000340)={r13, 0x265, 0x20}, 0xc) r14 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r14, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x7fffffff, 0x40, 0x260, 0x2]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r15}}, 0x48) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r16, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r15, r3}}, 0x18) 23:31:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000007a00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:19 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x60882, 0x0) 23:31:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02fffffffb00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r6, 0x7}}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:19 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000800000000000000012a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x29}}, r3, 0x4}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02ffffefff00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:19 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x2000}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x20044, 0x20bbc0) r1 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x2, 0x204b80) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000040801010000060000000000000000080c00048008000240000000040c0804800800014000000081"], 0x2c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x804) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:19 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x6) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000240)={r11}, 0x8) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f00000000c0)=[r9, r6, r1, r12, 0xffffffffffffffff], 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r13}}, 0x48) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r14, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r13, r6}}, 0x18) 23:31:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02ffefffff00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:19 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xd4101, 0x0) epoll_wait(r4, &(0x7f00000000c0)=[{}, {}], 0x2, 0xfff) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00 \x00', @ANYRES16=r5, @ANYBLOB="00012bbd7000ffdbdf25050000000800340020000000060028000200000008003a0006000000050029000100000008003c000600000008002c004000000008003100feffffff08003900080000000800310005000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x4005) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2440, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = dup2(r7, r1) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r6}}, 0x18) 23:31:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02fbffffff00003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x63c180) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r1) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, r1) write(r0, 0x0, 0xfffffffffffffea6) syz_open_dev$tty1(0xc, 0x4, 0x3) 23:31:20 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:20 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:20 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 23:31:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x80) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r3, 0x0, 0x2, 0x4}}, 0x20) ioctl$VIDIOC_S_MODULATOR(r6, 0x40445637, &(0x7f0000000180)={0x3, "414fa568c9a2ec6344cf19ee84fdceaa6228934024fadecaee736b28700346c7", 0x10, 0x0, 0xffffffff, 0x8}) 23:31:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020002000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:20 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020003000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000340)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:20 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020004000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020005000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020006000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:21 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f00000000c0)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1024.837263][T23902] net_ratelimit: 28 callbacks suppressed [ 1024.837273][T23902] dccp_invalid_packet: P.Data Offset(101) too large [ 1024.899419][T23902] dccp_invalid_packet: P.Data Offset(101) too large 23:31:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r2, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r6, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r9, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r12 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r14 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r17 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r17, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r12, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r13, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r11, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r15, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r16, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r18, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r21 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r19, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r23 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r23, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r24) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r26 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r26, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r21, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r22, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r20, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r24, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r25, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r27, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r30 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) getsockopt$inet6_IPV6_IPSEC_POLICY(r28, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000140)=0xa6) r32 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r32, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x337) setuid(r33) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r35 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fstat(r35, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r30, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r31, @ANYBLOB, @ANYRES32, @ANYBLOB="0200", @ANYRES32, @ANYBLOB="0200", @ANYRES32=r29, @ANYBLOB, @ANYBLOB="02540002", @ANYRES32=r33, @ANYBLOB="020005d0", @ANYBLOB, @ANYRES32, @ANYBLOB="080004", @ANYRES32=r34, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r36, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x1a, 0x2) getgroups(0x7, &(0x7f0000000000)=[r27, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r34, 0xee01]) setresgid(r9, r16, r37) 23:31:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020007000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r2}}, 0x18) 23:31:21 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000800000000000000212a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xfff, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020009000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1025.238373][T24069] dccp_invalid_packet: P.Data Offset(101) too large [ 1025.261402][T24069] dccp_invalid_packet: P.Data Offset(101) too large 23:31:21 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02000d000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000140)={r2, 0x8, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r5, 0x6, 0x2, 0x101, 0x2, 0x1}, &(0x7f00000000c0)=0xffffffffffffffb9) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0xc0945662, &(0x7f0000000040)={0xff000000, "9b67ae1010d6c2f4f16433f3867f16193987e2346058e5b442dfded21de99cc4"}) write(r0, 0x0, 0x0) [ 1025.489771][T24185] dccp_invalid_packet: P.Data Offset(101) too large [ 1025.527288][T24185] dccp_invalid_packet: P.Data Offset(101) too large 23:31:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) recvfrom$l2tp6(r1, &(0x7f00000000c0)=""/229, 0xe5, 0x40000100, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) set_mempolicy(0x1, &(0x7f0000000000)=0x40, 0x0) [ 1025.540390][T24187] sg_write: 12 callbacks suppressed [ 1025.540622][T24187] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1025.540622][T24187] program syz-executor.4 not setting count and/or reply_len properly 23:31:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:22 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020023000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1025.825165][T24358] dccp_invalid_packet: P.Data Offset(101) too large [ 1025.843838][T24358] dccp_invalid_packet: P.Data Offset(101) too large 23:31:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r1) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r2) keyctl$link(0x8, r1, r2) write(r0, 0x0, 0x0) 23:31:22 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000000)={0x4, 0x100, @value=0xa16}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1026.001509][T24424] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1026.001509][T24424] program syz-executor.4 not setting count and/or reply_len properly 23:31:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000100)=""/46) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe2(&(0x7f0000000000), 0x4000) r5 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x1ff, 0x0) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000140)={0x3d}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1026.114276][T24505] dccp_invalid_packet: P.Data Offset(101) too large [ 1026.174181][T24505] dccp_invalid_packet: P.Data Offset(101) too large 23:31:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020029000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:22 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0xffffffff, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) write$binfmt_misc(r5, &(0x7f00000000c0)={'syz0', "03dfc4042e06eead446a58d7593dd7bbae8525ee725e1d1cab1a17e056bd10b6cda5e58b0290a715cb8074374ed22b06504fd824766af4be47d5aa7dbb3fa9ff10d7a29d1d106e68d4d0d267340bb9ccdaf992587d5936e2d0f2ae94c1023dcbcade21e96e66880455adc714de5bb3f45de75b060c4a8b7cac764a77db55b86c6f"}, 0x85) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1026.421954][T24586] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1026.421954][T24586] program syz-executor.4 not setting count and/or reply_len properly 23:31:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x1, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8}]}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5f7}, @NFQA_VLAN_TCI={0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0xc0000) write(r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) 23:31:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x1, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r2}}, 0x18) 23:31:22 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020030000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xa, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 23:31:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040), 0x2}}, 0x20) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_GET_DUMPABLE(0x3) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0xff}) fcntl$addseals(r3, 0x409, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget(0x1, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000340)=""/149) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000180)=""/85) r5 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x6977198a, 0x210080) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r5, 0x80dc5521, &(0x7f0000000280)=""/109) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0], &(0x7f0000000300)=0x2) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r6, 0xc) getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0x6, 0x0, 0x0, 0x51) syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xafb0, 0x0) [ 1026.822254][T24706] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1026.822254][T24706] program syz-executor.4 not setting count and/or reply_len properly 23:31:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020048000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:23 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:23 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r2}, 0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) write(r3, 0x0, 0x0) [ 1027.053705][T24751] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1027.053705][T24751] program syz-executor.4 not setting count and/or reply_len properly 23:31:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) fcntl$getownex(r5, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpriority(0x0, r8, 0x7) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x2880, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x128, r10, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9eb}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 23:31:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0) read(r3, &(0x7f0000000280)=""/152, 0x20000318) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/btrfs-control\x00', 0x314a00, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x40, r5, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0xe0c1}, 0x40000) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'fd/3\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000881) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040081}, 0x8000) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f708370b", @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf250200000014000500fe8000000000000000000000000000bb14000600"/54], 0x3c}, 0x1, 0x0, 0x0, 0xc841}, 0x804) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/sg#\x00'}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '/dev/sg#\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8891}, 0x40080d4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000080)={0xf3e0000, 0x36, 0xfffffffb, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9e0907, 0x800, [], @ptr=0x3f}}) 23:31:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r6, 0x40, "288c21", "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"}}, 0x110) 23:31:23 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02004c000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1027.267025][T24884] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1027.267025][T24884] program syz-executor.5 not setting count and/or reply_len properly 23:31:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x10000, 0x8000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:31:23 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1027.473497][T25017] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1027.473497][T25017] program syz-executor.4 not setting count and/or reply_len properly 23:31:23 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000003c0)=[{}, {}], &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={r5, 0x101}, &(0x7f0000000100)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$inet(0x2, 0x80001, 0x84) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f0000000040)) ioctl$VIDIOC_S_EXT_CTRLS(r11, 0xc0205648, &(0x7f00000001c0)={0x0, 0xffffffff, 0x401, r12, 0x0, &(0x7f0000000180)={0x990a94, 0x400, [], @value64=0x646}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r14, 0x84, 0x7b, &(0x7f0000000280)={r8, 0x3ff}, &(0x7f0000000300)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1, 0x1}}}, 0x48) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$PPPIOCSDEBUG(r16, 0x40047440, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x16, @empty, 0x4e24, 0x4, 'fo\x00', 0x22, 0x800, 0x34}, 0x2c) syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x92, 0x2000) r17 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r17, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r9}}, 0x18) 23:31:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020060000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x10000, 0xa07, 0x6d, 0x6, 0x3f, 0x1, 0x2, 0x8, 0x0, 0xff, 0x0, 0x80, 0xff}, {0x1, 0x1, 0x81, 0x9, 0x0, 0x13, 0x7, 0x1, 0x80, 0x1f, 0x5, 0x40}, {0x10001, 0x7, 0x71, 0x2, 0xb7, 0x3, 0x2, 0x2, 0xff, 0x0, 0x9, 0xff, 0x3d83}], 0x3}) write(r0, 0x0, 0x0) [ 1027.737845][T25064] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1027.737845][T25064] program syz-executor.5 not setting count and/or reply_len properly 23:31:24 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020068000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1027.791104][T25069] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1027.791104][T25069] program syz-executor.4 not setting count and/or reply_len properly [ 1027.817081][T25062] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 23:31:24 executing program 0: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x5, 0x3, 0x6, &(0x7f0000ffd000/0x1000)=nil, 0x10000}) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x105283) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) write(r0, 0x0, 0x0) [ 1027.890032][T25078] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1027.890032][T25078] program syz-executor.4 not setting count and/or reply_len properly 23:31:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02006c000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020074000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x42, 0xa7, 0x1, "1bed22b9878b78f4d956b39e114ade46718bcac7021aa696da6233c8256d8f0702df05734988a1e754b631530ebdd873ba64308a7f255a75e30b21bc092e0b6c4f8a"}) 23:31:24 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000800000000000001ac2a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote, 0x2}, r3, 0x3ff}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) 23:31:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffd, 0x100) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getrusage(0xffffffffffffffff, &(0x7f0000000180)) write(r5, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r10}}, 0x18) 23:31:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d02007a000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:24 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x880, 0x399882) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0xfffffffffffffdbc) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5}, 0x8) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x9f0000, 0x5, 0x400, r4, 0x0, &(0x7f0000000000)={0x980906, 0x3d2, [], @ptr=0x2}}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r7 = pkey_alloc(0x0, 0x1) pkey_free(r7) write(r0, 0x0, 0x0) 23:31:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$sock_void(r3, 0x1, 0x6c, 0x0, 0x0) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000080)={0x4, [0x0, 0x4, 0x101, 0x4, 0x7, 0x1, 0xfff, 0x5, 0x1, 0x3, 0x37, 0x94eb, 0x80, 0x401, 0x4354, 0x45d, 0x2, 0x2, 0x1f, 0x11, 0x4, 0x6, 0x8, 0x8, 0x80, 0x7b, 0x4, 0x4, 0x100, 0x9db1, 0x2, 0x3edf, 0xf801, 0xffff, 0x5, 0x6, 0x1, 0x8, 0x1ff, 0x5, 0x7c3, 0x6, 0x7f, 0x3, 0x1, 0x3, 0x16ba, 0x5], 0xa}) write(r0, 0x0, 0x0) 23:31:25 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000030000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40c0}, 0x20040000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:25 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60ee376a01842100fe8000000100000000000000000000bbff02000000000000000000000000000100000000650000000800000000000008fa2a000000000000050200000502000000479829ccecea93da377c5c9841d521ff1b0400478344368b9586d3426077515d55439d78177aeb2d960616baba49ad0c3682e27a29391cb1e6417b199a621f2f3e0dd25e7dc81dd647b41e17fe12cb0118adc803516197ef638b28bd12d8a4ceec3410c1b76803e3f668b1826464a2f67621facffe96f3252549ccab16799a5bc4ee898d4acf366ef22eb0a8d094a1c514ac3d3ae414e22e8bd886cf5409b539e2e3ef0dfef4608f8edb48a9e9a3bd54fde84db7bce493f04b8708e4150195de5ca247925d2606165fcf835c96da1ef6edfee7da38c3373e1af035ad72b7e421f9a272b6695b647e45369c9234c9b4b9ae5bf387a9a487b5ca24921e40486565d3f16efd3ad4dcc9f8a37910255d8d23c32e3862872160f160946e10b9dc79e8a5d5a6bc8c97ffee2bf25b8b1315c1ad848d16c8d86a1d9061789e0c5e52407ed8f38c0b953ab18600000000000000000000000401907800327982009210087ac63cd600"/452], 0x0) 23:31:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x2000, 0x0) ioctl$TIOCSBRK(r3, 0x5427) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000050000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:25 executing program 0: add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(0xffffffffffffffff, 0x0, 0x0) 23:31:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000060000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:25 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x26, 0x8008000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000100)='lo:\a\n`Q\xb1Y\xa0y}\vT\xd2\xff\x00\x00\x00 ') r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) recvmsg(r3, &(0x7f0000000300)={&(0x7f0000000080)=@tipc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/85, 0x55}], 0x1, &(0x7f0000000240)=""/154, 0x9a}, 0x2050) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000340)=0x134, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000380)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf65798a9b02de7a91a3cbdfa009cf75a7eadb2a0095d64812cca456b6655d640a108ec4d1964cd7bd913b37ed55716e6877103844cb8ff539faa12454e46d8895ee592c4640be13edd7b1d05bfcdc766973b93200aea3395abb8423cb9987e3458fb606", 0x3b) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 23:31:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x8002) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000a00)='\x00;\xeb\x8co\xcbW=\xf8\fR\x93f\xd7\x04\xf7\xc0\b#\x1d\x1b*rEq\xc8\xdao\xc9\x9fW\xc2I\x8e\x98\x97!Rj\xd6\xfe\x0e\xb7\xe6\x80\xf6\v\xd0\x99a\x1e]do\x9d\x90\xdd\xad\v\xcbB\xfc\xcf\xa2\x8bH*\x9c)4\xc9\xb4\xc2\x00e\xddK~R\xf3\r\x05P!\xccy\xe7c\xb5m!\b\x7fL{\xc1Z\xa5\xedq\x8b3\x88\xbb\x97\xcb\x9d\x03\x85\xfey0x0}, &(0x7f0000000040)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000005c0)={0x5, &(0x7f0000000540)=[{0x6, 0x9, 0x6, 0xbd}, {0xeb, 0x8, 0x4, 0x80000000}, {0x4, 0x40, 0xd8, 0x4}, {0x0, 0x1, 0x5, 0x9}, {0x9, 0x1, 0x8, 0x1}]}) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) r8 = dup(r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x14, r10, 0xc4c2c822e4e11799, 0x0, 0x0, {0x10}}, 0x14}}, 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x108, r10, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff0000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8d52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000100)=0x3, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_RESOLVE_IP(r13, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @rand_addr="d41139452f181c68f55e9e54a76394a0"}, {0xa, 0x0, 0x497, @remote, 0x1000000}, r11, 0xc6c4}}, 0x48) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r14, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r11, r4}}, 0x18) 23:31:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r4 = msgget(0x1, 0x0) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000180)=""/222) 23:31:25 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000070000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:26 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000090000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r5 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r5) keyctl$link(0x8, 0x0, r5) 23:31:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000000000000000000000000000000000000595f010b9bf57a86", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e00001000028006000e000000000004001200"], 0x40}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x4008000) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$netlink(0x10, 0x3, 0xe29eb18501c97691) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9710}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71111837}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bca2650}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x138c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41afe619}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0bb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60dbd6be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9a5c}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xbab57fe76dcdfd45}, 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:26 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d0200000d0000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1030.066741][T26015] net_ratelimit: 28 callbacks suppressed [ 1030.066752][T26015] dccp_invalid_packet: P.Data Offset(101) too large 23:31:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r0, 0x5) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x48042) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x5, 0x80000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x80000, 0x7) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000200)={0x980000, 0x80000000, 0x0, r6, 0x0, &(0x7f00000001c0)={0x980915, 0x1, [], @p_u32=&(0x7f0000000180)=0x2}}) setsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f0000000240)=0x7, 0x4) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000000c0)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet(0x2, 0x4, 0xeb) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r10, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000280)='/dev/sg#\x00'}, 0x30) r11 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x6) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$CAN_RAW_ERR_FILTER(r13, 0x65, 0x2, &(0x7f0000000300)=0x200, 0x4) write(r1, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1030.121469][T26015] dccp_invalid_packet: P.Data Offset(101) too large 23:31:26 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000200000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x20000400) 23:31:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x400400) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) 23:31:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x525300, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000080)) r3 = fcntl$dupfd(r1, 0x0, r1) socket$l2tp(0x2, 0x2, 0x73) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1030.338307][T26224] dccp_invalid_packet: P.Data Offset(101) too large [ 1030.393768][T26224] dccp_invalid_packet: P.Data Offset(101) too large 23:31:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000230000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:26 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000036c0)={{0x2, 0x4e23, @empty}, {0x6, @dev={[], 0x2f}}, 0x46, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bond_slave_1\x00'}) r5 = fcntl$dupfd(r3, 0x0, r3) r6 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000240)={r9}, 0x8) sendmmsg$sock(r7, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}}, {{&(0x7f0000000200)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="c501ba049b044e005bfb3a4bc9e00327e8f1de5554a84162140cc531eef6906d90138ba713d36722e0cb9dd8a4d73ec48576fe8aa030a0af1f86d0a542d0639a3fd9adec16145534b7bd35088d9f6eb1be7feb66af765c3a4cffca3423946940e08e4c7d7397ee71", 0x68}, {&(0x7f0000000340)="bb4fa13470823acbd1b4b00bde51ae19e1d7a3478c9fc7dc8d8c3b80dc716bb300d4ddd3eedc80d088d43408e5706650daa4d41878530f444028ee4b43ed9aca18ffa780d7769d5a61f969416b298cf8b444f487342918ebd1af8595d802297ebae7de8a76beb3ab54e2ebf692b146ed6fb37c7d1f4d71accadf76dedbf2e390ed0f4a18a2ad8d07757d42b6885db336e365420c83d26a06391ea60ba22d017c1379b513c083db05ad07ba85e898ceed0a800bdcaa866417e46c2e2bc3000282bfee160286e07bad7249e9364683124fad3213eab9a23a3bdd7587cc3d85155ddc", 0xe1}, {&(0x7f0000000440)="c1252043bfa9f8b73d64523f322ddda04a4fde3931cff12bbbe58316084711696681c934c3cbef739142f2b1aa9e348930092badef42f88788d79d9bba39a49f7aee07f751e67e517939562b001b5533dd65d7c6386fa9955808b25e392850f76a5d5f127717b930593288e48cb3bf633691a69c1e757f8a2c50c645926f526f73df913bce410fc1b23f30448271d938", 0x90}], 0x4}}, {{&(0x7f0000000540)=@l2={0x1f, 0x9, @none, 0x9}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="a75c53a97942136e7954fa19e968ffbd523624a93b13d2b4d77cc463d32f97cc5fb4bfb3f438fcea210a05d4ee655bd0d32adea2fa09d6b2f363cd0430f20c89985eb34f013a80ad426fedc889c9166afacf6cab2963", 0x56}, {&(0x7f0000000640)="78484c099d38a0e5253ebe913c9c90e855c2e024dec4f8f912399f9d08123004893c2d338ed910533fc7abb404ffd87ff97a0c7147963212545ce0cb5582dcf80ea708b64e20e3a7a60ea743de8b9d3fdf549bf40d663bb309376f5fb8a08906f15d513d76aecbe4e158d3e782cd", 0x6e}, {&(0x7f00000006c0)="f9aadd850f052bf65c1443342de830e5705d7751cf805edbdb6aa71d36b7de0e3bbc1fc809c2eb331ef231196045c814878a527c89b81ced798c46e4b2dd564fc7da76cbe3799a95f61dc179e99445eff1547ae3d140297cc31c5d7f0859e80194b03483b42da461dd3e6ddb168761dfbdb129d05151628471cc11ae8653d241d579cf0f69eb658b41443c10859850f0fdf43e060bcdf25783a28f8fa5115440e24e86284444431226bbd20bf1af506c31c88d2b994ae092e126aa1e14efdb8bee5312a0bc05d453424a6ba21a015f5f75277eba31cd79", 0xd7}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="969b49e2e52bd6ec202cbc6c83475e1b5e64ff975b9d061e79175b76a18c9541d456cf97820d67da86c9646edc2f9437f813a12d6da97483966ee80dbfe168b71839111d4dba49560935797725e1c2d532cc16320e05465a3b258a49f34c6f93232eec4ec2c1261e1024a0d7c6", 0x6d}, {&(0x7f0000000880)="47b4aed9528e8514d2cd1ddbaa75384ccad7968e73f0625b6d794208afcdd277cdc892d07e769276dfe49122c1dfb54f8e1aaa6506d907ce649ef1b1aad68c810b6777786efc661047b935bb86507ffeec4a09e65c3dc45e031600beb661437c8d18a3b57d1df4a3f802c61af3cef613b956401f2ee8fc6c75bf34dc2f80d00853a88f1e461f2a546487a34385eb505d714c28fff195242b9de541910f93cdd7e5dee8537f1eccbb11", 0xa9}, {&(0x7f0000000940)="a81fd746712145237620960031b2b6f97eb4bc9aca108403255c1dba1a4e751873db081331721f127504db87d7f34eb36242be61c5c041c76b6d9df1fc17dcbc55b07e01b486680a3f7440f964", 0x4d}, {&(0x7f00000009c0)="0193d67685807f2ac4718c0aff69f7875a9401c681415e8c5e6193b00b2ee1610fd85e69323b340ddf4271c13748e4ea26e584b1860884b29887387ea9fed6c23c21247e6416a5fce18f9123bcde2b38955cb3e2d1d242ee43527600a63ed6f63470e4c4eede9f84c92e7deddac6335e3ebebb2c7e21c9d839324a9905d64134f60a5657f376076aef7f3a5ef1e68b468ab5d4a34929215e2eb00a8fe0a6ccdf540a83a04e6e416606fc6217832088d020b5a42217c72c6e7bc4620fce381bbd589acf27b2a2ead24e0f6a779212d8601793a49825b86496a3e162f20e5c98e0bb8edd6773a79a9ecd", 0xe9}, {&(0x7f0000000ac0)="1c3fa0dcb1cbaf54fd0fa327f24259be1eb8846003b3ccdd66b31dc4a84693ba11c0e8367597d4aacc541702372b4b13d464d7d3b6efcbfad9236ecc35d3e4291ff33ca143778f77a2435981c729987af6b0bf09", 0x54}, {&(0x7f0000000b40)="b67d9c3a92b7dfe273a43447ca0fabb447ac506467bd08ada2485cb6f1a7ca06fb9680ab947cc86749cdc319816c6dbcaf9b846c12742c8aeb661dcfe32c113688f410f1474fcca92a7d96f80213ac5ae4719ddb0d43f64e9ffde398351c1637df0bc0a2905b94c151481561532fd30870eb57549ea4ca5b662d83df3f316432323abb7daa8b70675b1294530e8c4eae887ef3c118bb4a7cdf36c7ee08e1e89bf740b5d7aab5cd36c67ab1a01dcb0beb4eb49ca68b34f2d26f3a5e", 0xbb}, {&(0x7f0000000c00)="7fa29433e5622345befd6b1e09052c80dafa3dfeabd793e53f46c46cc7b967eb32319fba50583d5e54e66561497d4bafbe03fd6cf936e4d1115abc1d6da79ee301d95537e40ac5ee651b9492d26d15b94aeb703de6a77a07f8d846e6391d495de52139c82c7a28d94a12ad0c3fe410", 0x6f}, {&(0x7f0000000c80)="883cf50c0af50f797277af252859cad6eeebd0924c55e5edc1334a07f6c8b0c2bc9079c38ace874a532854593424382bbefb1799bd9cd51a0a7d281b2d91d0f909b24daee5e2d29467901f0c96c31498f74e8bdb1dcc21b7362c61e21efeed91b0540394b6ddd6096c3153c84a19e2a5a1fe855db198f5a96dc6c10d79bdb58be4206114065bc05d166c4691f5274fac", 0x90}, {&(0x7f0000000d40)="03ac8897095590c32ef16514a1ba5c5f53dee7a8cecba439c65ec74f02ace0e97e25a350b6d8d74528d0fa8fca57581ee7fb1ec146f5c1f92a39d98c2676a40798038ba36677fbbd49596a9356d664da0bfd074823394d163270c9852751245aab4fc09ab2ea06ce7093e0328fee8edf2eb154245de712e3139bff51a36aababc142deda399866b45068a0e841783144515976ed60e372f354d3df84674059ca0c7a69b0fbef876f1e68e0d880d70e5f7e56c54a786267331ac2f898cb8f895ee12aae4a1b622ba9a0780380c4337bbb9e5049560c1e53fc440e2f347586c1464be382860087032a56dcf773c7173eda92a1a8e694a6", 0xf6}, {&(0x7f0000000e40)="2a90f59596a5c2f2709a1c11a62cce99c0c830c098911094a777e3fd37d96f0360569846dc76d90adf4e4e03e060f74852ad75d7809fa2013a701f2fec9fc64d09b996860b0c30c99dc95587c0a76216f645c4dada134b92ccf65d13a1d5cc6db9d80d2889bbc7fe50bb04b441425243b24bc3c326fdfbee908e075e1fb2bf365bc512d2493fe61c8d063a8abe30902ec35a024e0f64e18f9253389656060e5334697a3e795c3c0940be9182f2b6df080d1dcaf4a4260045137242f7e228a5b97c4d01124804888857a0d7f884a24b43a06b892007859568d73a28bc931150d2f943d96eaf030d07f336371840695bf20dbff1f105ff", 0xf6}], 0xa, &(0x7f0000001000)=[@txtime={{0x18, 0x1, 0x3d, 0xa4a7}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000001040)="cf6c8c88fa89ff47e453a8d5422f83a1c6", 0x11}, {&(0x7f0000001080)="d561270f236d2e60c92e192a99bc8d014de7499ae00a90e7b558bb3534294162355317d606fd539a2f1a8df6aead3f0bbe447ba76d2136245d276cf40738573e46f1fe96d016f81b6300b3a36404bdd3cd79c884e90fa5e5f98ad0587b", 0x5d}, {&(0x7f0000001100)="014e6fa40f7c2192e045", 0xa}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="b482f4fef83b2bfeaac156dd6389bbbca7b70e7604508e06b6caf3150b545911c8194c08ac81f16f78a5107fee2ea3585110a60536d9e1514a7ff091d479782a7daa17ab31f9", 0x46}, {&(0x7f00000021c0)="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", 0xfa}, {&(0x7f00000022c0)="9399fa36da5da7082e65407233d68774c487c257f3e1082a6b2ea31d66e56027d06c7b01adb8277303be54164f8cb4b2", 0x30}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="03745b1cbefcaed952c226fbd5020a724ec361b4e8a63bf0b304e38dc6ed582b8dbbf45b31f13d3ae5ded8170bd25e5106e896934fed357c71fd11062a4a63f41d67a8463157e3d4736ddc5e6d2d9d68050bfd11980a6c154e20b15b5ace8ae3b7c1b9734e22e2dad164fd952d2370f00f8841c5ba311418e9e76048d4a880b7913c519361bd165835d6807e53096017930d99ea20d740b3cb2cf1e3ef5c4e3e6aa09d436ca32a777c54b6e1bb8cbeb30e4685ee3e3e1754c9623bab43d9b23a5584897fb60656fde1afc528fb5f165cc6540fdd5e47596348", 0xd9}], 0x9, &(0x7f00000034c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4c}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xc15}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x90}}], 0x5, 0x20000002) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1030.686653][T26431] sg_write: 17 callbacks suppressed [ 1030.686670][T26431] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1030.686670][T26431] program syz-executor.4 not setting count and/or reply_len properly [ 1030.716105][T26444] dccp_invalid_packet: P.Data Offset(101) too large 23:31:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/180) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) 23:31:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r1}}, 0x18) [ 1030.768203][T26444] dccp_invalid_packet: P.Data Offset(101) too large [ 1030.796796][T26446] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1030.796796][T26446] program syz-executor.5 not setting count and/or reply_len properly 23:31:27 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r6 = dup2(r4, r5) read(r6, &(0x7f00000001c0)=""/108, 0xfff4) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a5200200", @ANYRES16=r8, @ANYBLOB="00022cbd7000fedbdf2502000000140002000f5127f690c765bada29fe88000000000000080000000000010114000200fe80000000000000000000000000002e14000200fe8000000000100000000000000000bb2a00070073797374656d5f753a6f626a5263745f723a696e697472635f7661725f72756e5f743a733000000005000100000015b6058e2badcfc7967a6a0d0b343c9805ba2cba9b15dc41f9bdaf08fdec398e7d5fbbff4451be6689c56a81d3d8520012d800"/196], 0x8c}, 0x1, 0x0, 0x0, 0x4040}, 0x24000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbdf25030000001400060076657468305ff46f5f6272696467650008000500e000000214000300fe88000000000000000000000000000108000400ac1e000114000300000000000000000000000000000000012300070073797374656d5f753a6f626a6563745f723a7661725f6c6f675f743a73300000"], 0x84}, 0x1, 0x0, 0x0, 0x10048000}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr="64080855be1b8236a68f7c136719e3ad"}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @multicast1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x3}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x40}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x9, 0x0}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = dup2(r3, r1) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f0000000080)=0x401) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x9) 23:31:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7, 0x18002) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$uinput_user_dev(r4, &(0x7f0000000300)={'syz1\x00', {0x5, 0x80, 0x2, 0x7}, 0x55, [0xf8d, 0x7, 0x7, 0x9, 0x7, 0x5, 0x800, 0xaad, 0x7, 0x5f6, 0x10001, 0x404000, 0xaf9, 0x1f, 0x80000000, 0x7, 0x1, 0xb2e9, 0x7, 0x4, 0x7, 0x3, 0x1, 0x5, 0x5, 0x80000001, 0x1, 0x7f, 0x9, 0xfffffc06, 0x4f73, 0x6, 0xf34e, 0x80000000, 0x8, 0x5, 0x2c, 0x5, 0xfffffff8, 0x5, 0x0, 0x7057, 0x1, 0x9828, 0x6, 0x1, 0x400, 0x1, 0x4, 0xdfad, 0x10000, 0x80000001, 0x9, 0x200, 0x200, 0x8, 0x800, 0x8, 0x0, 0xf47, 0x4e6, 0x5, 0x3, 0xfffffffc], [0x10000, 0x3, 0x9, 0x1, 0x9a, 0x6, 0x6, 0x8, 0x1, 0x9e81915, 0x401, 0x3a, 0x9, 0xfffffff7, 0xfffff236, 0xfff, 0x5, 0x800, 0x6, 0xc7, 0x1, 0xffff, 0x675, 0x6ecb5bc5, 0x0, 0x5, 0x2, 0x0, 0x81, 0x20, 0x7, 0xed4e, 0x3, 0xff, 0x2, 0x56e00bab, 0x80, 0x1, 0x0, 0x10001, 0x6, 0x7ff, 0x2690cca3, 0x3, 0x4, 0x3, 0x75b, 0xfb6d, 0x5, 0xcf, 0x200, 0x8, 0x0, 0x1, 0x80000001, 0x8000, 0x80000001, 0x800, 0xe7c2b86, 0xffff, 0x7, 0x9ac, 0x5, 0x7], [0xfffff378, 0x1, 0x4, 0x8, 0x8001, 0x1, 0x7, 0x100, 0x6, 0x8, 0x0, 0x80, 0x6, 0x3d, 0xfff, 0x3ff, 0x100, 0x8, 0x6, 0x5, 0x0, 0xb24, 0x9b, 0xffffffff, 0x186, 0x7, 0xfffffffa, 0x1, 0x6, 0x10001, 0x3, 0x24365dd1, 0x9, 0xb0, 0x3ff, 0x2, 0x8, 0x1f, 0x8, 0xe9ac, 0x80, 0x101, 0x6, 0xb0c, 0x54, 0x8, 0xffffff7f, 0x9, 0x3, 0x2, 0x6, 0x3, 0xffffff01, 0x9, 0x4, 0xfffffffc, 0x1, 0x2, 0x1, 0x7, 0x1f, 0x4, 0x1d, 0x9], [0x9, 0x9, 0x0, 0xbe, 0x2, 0x3, 0x80000001, 0x0, 0x0, 0x8, 0x4, 0xa9, 0x4, 0x7, 0x1a0d, 0x0, 0x0, 0x5e6c, 0x1, 0x0, 0x3, 0x7, 0x1000, 0x8, 0xe380, 0xc9a1, 0x8, 0x3, 0xfff, 0x8, 0x5, 0xff, 0x8000, 0x0, 0x8, 0x5, 0x0, 0x9, 0x6, 0x1ff, 0x800, 0x3, 0x8000, 0x8, 0x400, 0x9, 0x9, 0x6ff1, 0x6, 0x400, 0x7, 0x1, 0x4, 0x1, 0x9, 0xe9, 0xffffffff, 0x0, 0x101, 0x3, 0x4, 0xfffffffb, 0x4, 0x3ff]}, 0x45c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6722}]}, 0x30}, 0x1, 0x0, 0x0, 0x24041000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0xfffffffffffffffd) r6 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x109100) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000000080)) 23:31:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000290000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) [ 1030.994668][T26466] dccp_invalid_packet: P.Data Offset(101) too large [ 1031.014542][T26466] dccp_invalid_packet: P.Data Offset(101) too large [ 1031.136656][T26541] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1031.136656][T26541] program syz-executor.4 not setting count and/or reply_len properly 23:31:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x88, 0x1, &(0x7f00000000c0)={r1, r2+30000000}, &(0x7f0000000100), 0x0) add_key$keyring(&(0x7f00000002c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0xfffffffffffffe86) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) sched_rr_get_interval(r4, &(0x7f0000000240)) write(r0, 0x0, 0x0) 23:31:27 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1031.178898][T26568] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1031.178898][T26568] program syz-executor.5 not setting count and/or reply_len properly 23:31:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000300000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e32, @multicast2}}, [0xffffffffffffffff, 0x200, 0x2, 0x60e, 0x1, 0x0, 0xffffffff, 0x322, 0xb69, 0x3, 0x1, 0x8, 0xddf, 0x7f, 0x8]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000340)={r5, 0x7b, "04ebc1f55e0724844f7459b5dd5d8785239f5cc8a4b515d5a07a35c00c93a025fd386b1b8a797fbbc421ad055a9419d1177f4e896f3e413f6ce4f42869f7cbf17a06f6f844ea244b3fddecb518cb922764a2d6364cfd217621bd5cab5764e4293b8db3c37ecb48b09a292e600e0b3dedac4cbff277a4d5725438e9"}, &(0x7f00000001c0)=0x83) 23:31:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x4d9, 0x100}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r6 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x101001) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r7}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x9c9, @empty, 0x10000}, {0xa, 0x4e23, 0x4, @ipv4={[], [], @multicast2}, 0x81}, r3, 0x7}}, 0x48) 23:31:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)={r4, 0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000180)={0x699, 0x5, 0x4, 0x4000, 0x101, {0x0, 0x2710}, {0x1, 0x0, 0x2, 0x3, 0x6, 0xff, "8dad922e"}, 0xfffffffd, 0x1, @offset=0x7, 0x1, 0x0, r9}) ioctl$VIDIOC_ENUM_FRAMESIZES(r10, 0xc02c564a, &(0x7f0000000200)={0x40, 0x4745504d, 0x2, @discrete={0x511b, 0x7ff}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1031.404332][T26586] dccp_invalid_packet: P.Data Offset(101) too large [ 1031.440133][T26588] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; 23:31:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r2, r2, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x64, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eb010020a430916ab68229980b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d3ddf9e413"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0xc000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100)=r6, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r7, r5}}, 0x18) [ 1031.440133][T26588] program syz-executor.4 not setting count and/or reply_len properly [ 1031.465766][T26586] dccp_invalid_packet: P.Data Offset(101) too large 23:31:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000400000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x800, 0x89) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x3, 0x3, 0x4, 0x4000, 0x9, {0x0, 0x7530}, {0x1, 0x1, 0x7, 0xa1, 0x4, 0xb8, "16d26067"}, 0xab7a, 0x9efdf026e879905c, @planes=&(0x7f00000000c0)={0x7c, 0x8001, @fd=r2, 0x8001}, 0x2, 0x0, r3}) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000180)=0x4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = fcntl$dupfd(r0, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r8}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r8, r7}}, 0x18) 23:31:27 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:28 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1031.703058][T26629] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1031.703058][T26629] program syz-executor.5 not setting count and/or reply_len properly [ 1031.730666][T26644] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1031.730666][T26644] program syz-executor.4 not setting count and/or reply_len properly 23:31:28 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100100000}, 0x42, &(0x7f00000003c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="d924c6bdfcb1cea17eec5aac3cac9db47297dd6920a34985998870d3634f83", @ANYRES16=r2, @ANYBLOB="c900000000d322b6b503000061ac"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4044012) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1402b00}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x240000a0}, 0x40800) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1, 0x4}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 23:31:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0x2) 23:31:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@mcast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x29a}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) 23:31:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000480000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x400000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') sendfile(r2, r2, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x64, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "eb010020a430916ab68229980b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d3ddf9e413"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x64}}, 0xc000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000100)=r6, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r7, r5}}, 0x18) 23:31:28 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1032.204427][T26848] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1032.204427][T26848] program syz-executor.4 not setting count and/or reply_len properly [ 1032.227290][T26870] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1032.227290][T26870] program syz-executor.5 not setting count and/or reply_len properly 23:31:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x6, 0xa800) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000180)={0x4, @random="31c8f725f0dc"}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x14}}, {0xa, 0x4e21, 0x0, @mcast1}, r4}}, 0x48) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000000)={0x2c48, 0x1, 0x71, &(0x7f00000000c0)="b6074d1ee5887241384138506b9af6b6326b32cc89d20b21d6689b73f9d39afac369b6b99e25e6a82611aae838a7066d84292c5041e383585c383e6a55759251a56d9f576534e82f53adb599a33bc24fe27bad4c05fcb1b0a54e3eb150a44854563e6321f9f2eac25a306c0f6552fb264a"}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r3}}, 0x18) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000240)={r9}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000340)={r9, @in={{0x2, 0x4e21, @multicast2}}, 0x1000, 0x8e, 0x9, 0xffffffff, 0x1}, &(0x7f00000001c0)=0x98) 23:31:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000180)={0x60000002}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:28 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r2}}, 0x18) 23:31:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$can_raw(r4, &(0x7f0000000180)={&(0x7f00000000c0), 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x4, 0x1, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "59eafae2ec9bef00"}, 0x10}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000000)=0x1) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) 23:31:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d0200004c0000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="04474b1949ffd7c066b60f8948459b9b3b6fbe0e01da0ae925d4ea64e7dd0b15407fe5ffaa47fe0ae771f3d6327e3b7dfd3b78f6264027e6ee5f64f9482091b2d0035bee6a73a82ccda3c82f98c2f30acf7527b34c0eb018be125e3c", 0x5c, 0xfffffffffffffffc) r6 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0xfffff, r6) keyctl$instantiate_iov(0x14, r5, &(0x7f00000001c0)=[{&(0x7f0000000340)="10fe458b90e328c4b9ca86f8de5c247515fa8b5eeced1dc58428ac4147fefa989d40f652afa3be2374e9108d58fb07f593a160eeb78aabc63ba67f45de221ea6367fdf82af6a5cd8d39f36e7", 0x4c}, {&(0x7f00000003c0)="a3e6fb63ea0f464c82f2310d71b21450448e48bc5687d5af5f495acb3c36d26135f2b6fdb9cb9b3447386f346336e1909959010f36de7af1d162f7dda5b4ccb6e0ba2b97fc7a9362e33326eb15144caa0f68b736391bde", 0x57}], 0x2, r6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x2, 0x7f, 0x1, 0x1, 0x417}, {0x4, 0x803, 0x8000, 0x401, 0x2}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r7}}, 0x48) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r7, r2}}, 0x18) 23:31:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000600000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) [ 1032.600214][T26977] sg_write: data in/out 167162/24 bytes for SCSI command 0xff-- guessing data in; [ 1032.600214][T26977] program syz-executor.4 not setting count and/or reply_len properly 23:31:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) 23:31:29 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000240)={r7}, 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x6, r5, &(0x7f0000000000)="730af67f54fc250209ee0f9aeade331be5b3fa478ff452fe0313a87b3609c3542d1e88e6b2742a608d52fa97eff7", 0x2e, 0xfe5, 0x0, 0x1, r9}]) 23:31:29 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1032.787613][ T28] [ 1032.789982][ T28] ===================================== [ 1032.795631][ T28] WARNING: bad unlock balance detected! [ 1032.801183][ T28] 5.5.0-rc7-syzkaller #0 Not tainted [ 1032.806489][ T28] ------------------------------------- [ 1032.812032][ T28] kworker/u4:2/28 is trying to release lock (&file->mut) at: [ 1032.819518][ T28] [] ucma_event_handler+0x711/0xef0 [ 1032.826274][ T28] but there are no more locks to release! [ 1032.831997][ T28] 23:31:29 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) [ 1032.831997][ T28] other info that might help us debug this: [ 1032.840069][ T28] 4 locks held by kworker/u4:2/28: [ 1032.845178][ T28] #0: ffff88821aaa4d28 ((wq_completion)ib_addr){+.+.}, at: process_one_work+0x88b/0x1740 [ 1032.855295][ T28] #1: ffffc90000e37dc0 ((work_completion)(&(&req->work)->work)){+.+.}, at: process_one_work+0x8c1/0x1740 [ 1032.866588][ T28] #2: ffff8880a9515390 (&id_priv->handler_mutex){+.+.}, at: addr_handler+0xaf/0x3d0 [ 1032.876181][ T28] #3: ffff8880988ac260 (&file->mut){+.+.}, at: ucma_event_handler+0xb3/0xef0 [ 1032.885059][ T28] [ 1032.885059][ T28] stack backtrace: [ 1032.890963][ T28] CPU: 0 PID: 28 Comm: kworker/u4:2 Not tainted 5.5.0-rc7-syzkaller #0 [ 1032.899366][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1032.909645][ T28] Workqueue: ib_addr process_one_req [ 1032.915023][ T28] Call Trace: [ 1032.918327][ T28] dump_stack+0x197/0x210 [ 1032.922679][ T28] ? ucma_event_handler+0x711/0xef0 [ 1032.927894][ T28] print_unlock_imbalance_bug.cold+0x114/0x123 [ 1032.934067][ T28] ? ucma_event_handler+0x711/0xef0 [ 1032.939278][ T28] lock_release+0x5f2/0x960 [ 1032.943794][ T28] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1032.949618][ T28] ? lock_downgrade+0x920/0x920 [ 1032.954480][ T28] ? trace_hardirqs_on+0x67/0x240 [ 1032.959779][ T28] ? _raw_spin_unlock_irqrestore+0x9f/0xe0 [ 1032.965598][ T28] __mutex_unlock_slowpath+0x86/0x6a0 [ 1032.971122][ T28] ? wait_for_completion+0x440/0x440 [ 1032.976604][ T28] mutex_unlock+0xd/0x10 [ 1032.981005][ T28] ucma_event_handler+0x711/0xef0 [ 1032.986035][ T28] addr_handler+0x2e9/0x3d0 [ 1032.990554][ T28] ? cma_work_handler+0x1f0/0x1f0 [ 1032.995590][ T28] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1033.001868][ T28] ? addr_resolve+0x3b0/0x1ad0 [ 1033.006649][ T28] ? rdma_translate_ip+0x2f0/0x2f0 [ 1033.011962][ T28] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1033.018126][ T28] process_one_req+0x106/0x680 [ 1033.022884][ T28] process_one_work+0x9af/0x1740 [ 1033.027834][ T28] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1033.033216][ T28] ? lock_acquire+0x190/0x410 23:31:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r3, r2}}, 0x18) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000000)) [ 1033.037912][ T28] worker_thread+0x98/0xe40 [ 1033.042412][ T28] ? trace_hardirqs_on+0x67/0x240 [ 1033.047556][ T28] kthread+0x361/0x430 [ 1033.051626][ T28] ? process_one_work+0x1740/0x1740 [ 1033.056820][ T28] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 1033.062542][ T28] ret_from_fork+0x24/0x30 23:31:29 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:29 executing program 0: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0) 23:31:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0xa10000, 0x9, 0xd15, r0, 0x0, &(0x7f0000000080)={0x9b0950, 0x0, [], @string=&(0x7f0000000000)=0x81}}) timerfd_gettime(r5, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9b02de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000680000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x8002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d0200006c0000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1acfbd6cbf87798a9bc4de7a91a3cbdfa009cf75a7eadb2a00", 0x48) 23:31:29 executing program 1: syz_emit_ethernet(0x1ba, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/452], 0x0)