@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x42}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x2d0}}, 0x40000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r4 = inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000640)={&(0x7f0000000600)=""/28, 0x220000, 0x1800, 0x5}, 0x18) inotify_rm_watch(r2, r4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e22, @rand_addr=0xfffffffffffffff9}}) 01:36:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xff016a) [ 402.387647] sg_write: data in/out 2130873594/1 bytes for SCSI command 0xff-- guessing data in; [ 402.387647] program syz-executor2 not setting count and/or reply_len properly 01:36:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x84800) ioctl$TIOCGPTPEER(r2, 0x5441, 0x5) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fd) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000000)) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x3b3) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x2, 'client0\x00', 0x4, "0faef7da34010580", "c5c0fbbc9f52378423b3c4dd9854e01bb8aad8ad60ed1cf529c6c3e950c5accd", 0x7, 0x2}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020048000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x9) r3 = memfd_create(&(0x7f0000c19ff0)='trustedvboxnet0\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000000)) write$sndseq(r3, &(0x7f0000000200)=[{0x1e, 0x0, 0x0, 0x1000800003fd, @tick, {}, {}, @raw8={"f6ea549769d3e4964d5f234a"}}], 0x30) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) write$binfmt_misc(r2, 0x0, 0x0) 01:36:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:24 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x80, 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000040)={0x80, 0x12, &(0x7f0000000240)="8d8a26b1bb6c24ed97720d92b7bed594e4f2defff1fb9b8d7cd929b1303e89575a94c4330c78adb8f76380022494730f6525d1b99529654dc5316e872446ea62b7eeea36e7aada8cb42ce9d1e2425df74af8e2811b244c9233482c870a7ebf12c7b0cf14638610b33cb3d33b8be4c2f62119f76a149ae78c01cea90de92174aa7b203df8f368f8a8971ff5fe75e88630f0d221e9cfc1064849c71d54a63fb69e6e0a8dc9a32a51ac", {0x0, 0x3, 0x777f575f, 0x7, 0x3, 0xc9, 0x8, 0x2}}) [ 402.626289] sg_write: data in/out 167162/899 bytes for SCSI command 0xff-- guessing data in; [ 402.626289] program syz-executor4 not setting count and/or reply_len properly [ 402.640745] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 402.640745] program syz-executor2 not setting count and/or reply_len properly [ 402.708660] sg_write: data in/out 167162/899 bytes for SCSI command 0xff-- guessing data in; [ 402.708660] program syz-executor4 not setting count and/or reply_len properly 01:36:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d024c00000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x6000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0x7}, {0xa, 0x4e21, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, 0x98ff}, 0x3, [0x13aa6dbc, 0x6, 0x86c, 0x2e29, 0x2, 0x4, 0x8, 0xffffffffffffffff]}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0x0) 01:36:24 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4(r1, 0x0, &(0x7f0000000180), 0x80800) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) fchmodat(r5, &(0x7f0000000140)='./file0\x00', 0x42) setsockopt$inet_tcp_buf(r5, 0x6, 0xf, &(0x7f00000000c0)="f3332b7f3b99ac720304ca1f29fa752dd7b629", 0x13) 01:36:25 executing program 0: socketpair$unix(0x1, 0x2000003, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="05000000000000002a090e24d0231fd0f29397"], 0x13, 0x3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) [ 402.890592] sg_write: data in/out 1275235578/1 bytes for SCSI command 0xff-- guessing data in; [ 402.890592] program syz-executor2 not setting count and/or reply_len properly 01:36:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000100)) 01:36:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d027a00000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:25 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x7d, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000300)={0x0, 0x9, 0x3, [], &(0x7f00000002c0)=0xd0b1}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f00000000c0)) open_by_handle_at(r2, &(0x7f0000000180)={0x84, 0x0, "cab66005c025b297feb019841a13eb2394f9f8213aca92e030f7aef969ae7864b9073fedfecbed24ffe9272890b71d1e698d16175e78197266154819e3411216730e6ee44dd07f5ae3ad3dcfe6ca4b634255f8b34c4b03af667c17ac91a8ed680bcd7a4af2b3445f3711b2fca562103e17be96d7c23ac4f8802da59e"}, 0x802) write$binfmt_misc(r4, 0x0, 0x0) 01:36:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x7611) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x6c, 0x20, 0x308, 0x70bd2c, 0x25dfdbfb, {0xa, 0x14, 0x34, 0xfffffffffffffffa, 0x800, 0x0, 0x0, 0x7, 0x10002}, [@FRA_SRC={0x14, 0x2, @mcast1}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x8, 0x13, 0x100000001}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x8, 0x13, 0x98a}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x10) [ 403.163969] sg_write: data in/out 2046987514/1 bytes for SCSI command 0xff-- guessing data in; [ 403.163969] program syz-executor2 not setting count and/or reply_len properly 01:36:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x200, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1000) ioctl$KDENABIO(r2, 0x4b36) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/context\x00', 0x2, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:25 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2842, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000200)={0xb8c2, 0xa5, "845debf0e056a024491964e25120bf357c7350f22c775a8e7730cfabc8580a8e52b20b422add446328cd36277219e1a108befadb1051e93f1d78cbe0dfd58648a744f5cd57203c0d036f5536fd59e6cfb8b7eb07e71933002471006fbc455233a62f5425575936c0a46fc5bc444c891a420f778945e32b4801b861d57b3e638c3b7ee98ae752938dc893f6bca82aef62a704119f5e155adb9b7003e712b028a4e839904b62"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020200000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:25 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) ioctl$TCSBRKP(r1, 0x5425, 0x9) 01:36:25 executing program 4: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3, 0x3ff}, &(0x7f0000000200)=0x8) 01:36:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000180)="20d4f1727beff15745080d37094c7831b8b7bb7a8e8acc7ec3c8f6854153a5f3640b6ade89ef73de0998c4642d0eab0ad49afcc05d6f5f5f2caf35ec57b6a23a0728158f06882d362792af98a485f52437a2083032165a0bccd73ad5841f7e6c729b63347cabc7d0d7c1ff9b8f60f8830f913e337ecf28e9331c85ebb8e681835de7b2c95200af9a17fb327317ddc6b08883cbbe2329d78414279dd6ece25a5e15341c4423dd5a9163c4786b3239dd51e0e427c7223b4f418dbe28020707f7d3ba4308347996728284e27d1e18faaec8f80a"}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x1f, 0xbb7, 0x0, 0x8}) write$binfmt_misc(r2, 0x0, 0x0) 01:36:25 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2842, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) [ 403.408314] sg_write: data in/out 33721594/1 bytes for SCSI command 0xff-- guessing data in; [ 403.408314] program syz-executor2 not setting count and/or reply_len properly 01:36:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) 01:36:25 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x9, 0x6}]}, 0xc, 0x0) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v1={0x1000000, [{0x7, 0x873}]}, 0xc, 0x1) 01:36:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200ae000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x92, 0x8006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x184, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8000}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x67c}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) r4 = semget$private(0x0, 0x0, 0x8) semctl$SETVAL(r4, 0x3, 0x10, &(0x7f0000000440)=0xb6) 01:36:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r3 = fcntl$dupfd(r0, 0x0, r0) accept$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000280)=0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r4, 0x0, 0xfeffff) 01:36:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) [ 403.674797] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 403.674797] program syz-executor2 not setting count and/or reply_len properly 01:36:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000080)="f599d635beba7e3afa79bc88f06ccb56a6cca185445cf3a78ef43d60b9035215461730276a279d57fa5d7dd8b32eaa2beaf0706a23a4a23737b0360a6db9e02e712aa885e48957f3394284d7f86d237e1a66d8fcec5704695d15c663c5954ff68e65e505825a4b93fcc589c2cb9b25ec8c40845e27d8fab6a34ce0cdb3a17d1de6bbea68489caa42bd74eb4e") r4 = gettid() ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000180)=0x0) kcmp(r4, r5, 0x7, r1, r3) write$binfmt_misc(r3, 0x0, 0x0) 01:36:25 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000200)={0x1, 0x717a4752, 0x2, @stepwise={0x3ff, 0x5, 0x101, 0x1490a9d8, 0xffffffffffff2f50, 0x100000000}}) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000180)={0x3, "f8242c4a2cb7f9c39a3b83f004ce93923f13be37a4d4465aab7a6d0c94050f37", 0x3, 0x20, 0x4, 0x41f, 0x10, 0x0, 0x4, 0xff}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) timerfd_gettime(r4, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000240)=0xf8, &(0x7f0000000280)=0x2) write(r3, &(0x7f0000000640)="b63db85e1e8d02f300000000003ef0feffffffffa2ee09769510e4c90b129554cd153bffffffe22c9b160096aa1fae1a00000000000000000000000000000032d3912792906ece1319a4960bd0aea312dddfd2f636eeebea5e4b727f573ab5f7f5c963b84fea06c814b644ec7a45e11b0b44a3d931d3a2053ce175f46fc9266ca3a84ae4435446bb7e7eca9b47a8ec5c8cc7314b5e2c74e214623d829ddc54fe357313413d1836bd0b294784404558a0da00ed0f0588125a69528a6ffcc539f22263cbae3c937f4f272d38b3bc5f07dcf47b8a484a8e83fafea1aaef1b2601598b80c3ede591eaecd0815e6ac021adb48eca63f83b1774b2f43342145dbb86bbf00ae5bc5d69f6398c15f9da6c8665ce2f8b7d04d2f61524c582ede4da57309ed0d6002a977b3abe0df3d13e1a5d03f2588872d8e4d2a8852d188417b3ec5c2a805fbb06c6913e330b6d635b4cd79f9782ac348789014bd730b12f2562f0814af2c59c1a82403087c3bfaa75b2ab6791a4050ab894f509e83b584d00b82bb51b76dcf8ad5dd992e8f520b7d491ac9c3a81743640b566c9dfe572ec9387d04203b397512e01590b5e88f01866651559f9bef71b518e2069cbdc8e45a433575592dcce977e0796b92524", 0x61) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:25 executing program 1: openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1, 0x0) 01:36:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) 01:36:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000600003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:26 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000040)=0x78) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0xf, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400202) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x10000000000000f0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000240)={0x10005, 0x0, &(0x7f0000ffc000/0x1000)=nil}) fstat(r2, &(0x7f00000002c0)) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0xfffffffffffffffc, 0x0, 0x81, 0x3, 0x1, 0x21, 0x1b, "089f8c0c27a3f253e998d4791964359a6d6585c1", "310482107f0ad4a5bb0190680127f64aa2fdb562"}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x92) 01:36:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0x3, 0x1}, 0x14) sendto$rose(r1, &(0x7f0000000180)="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", 0x1000, 0x4000, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0x0) 01:36:26 executing program 5: clone(0x13102041ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2e) ptrace$getenv(0x4201, r0, 0x0, 0x0) 01:36:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02fffffffb00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:26 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e22, 0xeda7, @mcast1}}, [0xccb, 0x9ef, 0x3ff, 0x8, 0x7, 0x7, 0xf325, 0x8, 0x1, 0x7, 0x0, 0x5, 0x4, 0x8, 0x7]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @multicast2}}, [0x7, 0xaeb, 0x18b1, 0x40, 0x9, 0x4, 0x80, 0x3, 0x100, 0x800, 0x1b1, 0x4, 0x2400000, 0x2, 0x64]}, &(0x7f00000000c0)=0x100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x7fffffff}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:26 executing program 5: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x1b, 0x0, &(0x7f00000003c0)) close(r2) close(r0) 01:36:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020060000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) write$binfmt_misc(r2, 0x0, 0x0) 01:36:26 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)="6dceec84136ed7074cd853863b6ff41f02a2d80564958c32f6e826ec9d8e717ca80df81cdfa52a0ddcad28792d5d33e39a5c0ed51a5b9e3dd7494dace1f13379071b5fc0c5e16bbb97a5bfc6e28dbdb0490d26f34180c352575fed7a4d760f520a9327c2270a1678bd40769c4460cad587b99903e939a4c405df98996d99544addc4be95b7a9cf4190644da4d43c4b18ad8e50939cc1706cdc28162f", 0x9c}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r0, 0x0, 0x720770) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@dev, 0x0}, &(0x7f00000000c0)=0x14) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={r4, 0x9, 0x52, 0x1000, 0x3, 0x4, 0x7fff}) 01:36:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r2, 0xa, 0x5) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r4) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000001200)="a3", 0x1}], 0x1}}], 0x1, 0x4000094) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001240)="8c", 0x1}], 0x1}}], 0x1, 0x4000000) 01:36:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020900000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:26 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x301002, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) 01:36:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0xf000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x300, 0x0, r1, 0x2, 0xf}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) 01:36:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$dupfd(r1, 0x0, r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r3, 0x0, 0x0) 01:36:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fb) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x2) 01:36:27 executing program 4: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)=@ethtool_modinfo={0x42, 0xff, 0x3ff, "e5905b931da3478a"}}) write(r2, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000100)=0x1) [ 404.883662] bridge_slave_0: FDB only supports static addresses 01:36:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000ae00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:27 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x7f, 0x200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x0, 0x3, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x381102) accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) [ 404.928657] bridge_slave_0: FDB only supports static addresses 01:36:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$netlink(0x10, 0x3, 0x10) readv(r1, &(0x7f00000026c0)=[{0x0}], 0x1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="ff9f1d9839000bd4030000000000423b6926"], 0x1}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000023000)={0x0, 0x0, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x14, 0x20, 0xaff, 0x0, 0x0, {0x3801}}, 0x14}}, 0x0) 01:36:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:27 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20, 'em1+:'}, {0x20, '/dev/ptmx\x00'}, {0x20, 'self'}, {0x20, '/dev/ptmx\x00'}, {0x20, '/dev/ptmx\x00'}, {0x20, '^wlan1GPL-wlan1:*vboxnet0+{keyring'}], 0xa, "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"}, 0x105a) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000001100)) write$binfmt_misc(r1, 0x0, 0x0) 01:36:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02004c000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:27 executing program 5: 01:36:27 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:27 executing program 5: 01:36:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)={'security\x00', 0xe6, "3dcba7788b722a4138c0f817b4069361ece6b0b37a3a64e0ba1817738c3268e0dd9565de2117846d5694f0580e5776d6e35e7dc79392b5d3ceeb424393de754176669b51a0bba38572a0c2d0e56d9a5b31297ee0abe3c54b148cdddac8aa97d6ea64c4ba4db8003c44bbe9aa3f83cdc9e7e09973ca5ca3ed724ed907b3a14289b234d6ced4fb613e1b46f3ecfc6d61f4c9e313288008c85545890ffcc8907dd470ab5c255009cb76ae3041c3a52c75c45f166f165978d74cb94fcca9b8fba7052f1dba00adfa81c3e34345d46254afcd3dc0ea1a40704f28d3e099ae3f43e623bc3aaf034975"}, &(0x7f0000000080)=0x10a) 01:36:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x66}, &(0x7f00000000c0)=0x8) write$P9_ROPEN(r1, &(0x7f00000001c0)={0x18, 0x71, 0x2, {{0x0, 0x1, 0x1}, 0x401}}, 0x18) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0x34}, &(0x7f0000000180)=0x8) write$binfmt_misc(r2, 0x0, 0x0) 01:36:27 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200040, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000400)='/dev/dmmidi#\x00', 0xfffffffffffffff8, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x5) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r4 = dup3(r1, r1, 0x80000) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000340)={0x1, @default, @rose={'rose', 0x0}, 0x4, 'syz1\x00', @bcast, 0x5, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xf}, @rand_addr=0x38000000000}, 0x8) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000140)=0xc) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x40, 0x0) write(r1, &(0x7f0000000200), 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000040)=0x7735, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000002c0)={0x137fc674, 0x207, 0x5d, 0x0, r6}, &(0x7f0000000300)=0x10) 01:36:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000d000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:27 executing program 5: 01:36:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) prctl$PR_SET_ENDIAN(0x14, 0x2) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0xae, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6ff3204d007808b4ff010000000000000000000000000001fe8000000000000000000000000000aa0600fff8660000000002000000000000000100c204000000010502000601030000000000000000008404030100000000ff010000000000000000000000010001fe80000000000000000000000000001200000000000000000502000200000000830090780b3e1d0000000000000000000000000001985497710b5bb87e57a0e8fe22a9e991c13b3461dacf3b5e559c2c0f9889b167ab9c0bb7cb66678dfe72b007f2732e99badf1ce289e0e14a0c92e6abb636408da67899651e1f6f6541c0bbc8115bec814a2fcf3600e60548dee82f6b876d901ec49aa0790e801e2d6697511530db81b7093171dc1391365378382f569f0050967aae532d4a801cc1c9bad9363ea58efcc646f328e9d5ad81ebe0c4aa2d77428431d1fa00000000"], &(0x7f0000001400)={0x0, 0x3, [0x5c5, 0x5db, 0x4000884, 0x569]}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080), 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000004c0)={0x0, 0xff, 0x42a2, &(0x7f0000000480)=0x400}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0x7) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000003c0)={0xff, 0xc, [0x5, 0xffffffffffffffff, 0xfffffffffffffff7]}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000500)=0xb) write$binfmt_misc(r2, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="bcbb5135722e448b639ac8611b445ef14ee68e2615cac006876bea6e832712ecb5f517f9b563414c1e531a", 0x2b}, {&(0x7f0000000180)="a18a3eadbba1d51bffe200fe38c935d538fc3e29dd1559faf710b9183c3ed6b7a9a95d45648fe263370604001107b7e554713616584bc0b278b133171b4e88cba630991c055dde7f18b5bae894bfa9f431e25f575e723c4a7d7e9b56faf9f59cf433a0351d7d192be6b5164e025aa812786d29f4a4180b2c07973f34306430c320261578977ecee2a39f14dbfacb87367107ae2cf290b893c0f3d07322ca8af8a8534210948fa75aade1939d4b4778b19846d00db21cf2fbac83f9ca99927b38f8", 0xc1}, {&(0x7f0000000100)="ceea8439", 0x4}], 0x3, &(0x7f00000002c0)="21a4f7110f0126cb12085b6354908693256c5b464e4459987f72ad8cf813616ec6400dc4f4703e3f4a515597619d0e1e5e677f105b629ed4fd2d26bae73cf360f7bb55648d5012d3659bc050742b7e35b946db44bcebae41169b1526b7917666ba5447d04aea9d2cb39856f4489913a4ce11c020d18c6045027d610f68dd547a10b5b899f80eefc04c06b847c25b5bb9d5f2385e0f4a8c0e97031db1978dbc8079e3d1d5da6f496f", 0xa8, 0x4000080}, 0x40) 01:36:27 executing program 5: 01:36:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000006c00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:28 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) 01:36:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000100)) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r2, &(0x7f0000000000)="b63db85ee107000000000000003e332ff454bd34a705a0be802cf0011dcc606aed69d2bc7037cebc9bc2feffffffffff", 0x30) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000180)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000c}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000203ee794ee0ed410ffc0cf06861159ce20958046f6e658cb50655f5c50fc322f45d97854c906580c9fcb1231c009723c415c60e9cfc2a9fc386c166a2207dec77bbfbc5734", @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf25010000000000000001410000001800170000000c000000056574683a65727370616e3000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000300)={0x10000, 0x4, 0x80000001, 'queue1\x00', 0x800}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400201) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000080)={0x3, 0x8, 0x1}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r4, 0x0, 0xfeffff) socket$can_bcm(0x1d, 0x2, 0x2) 01:36:28 executing program 5: 01:36:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000080)={0x7, 0x4}) write$binfmt_misc(r2, 0x0, 0x0) 01:36:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000002000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:28 executing program 5: 01:36:28 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20841, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x305100, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x400000009) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x5, 0x4, 0x0, 0x1, 0xffffffffffffffff, 0x5000, 0x5, 0x3, 0xff, 0x1f, 0x100000000, 0x1ff, 0xcd44, 0x3ff, 0x4, 0x8}}) 01:36:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000d00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:28 executing program 5: 01:36:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCCONS(r1, 0x541d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f00000002c0)={0x1020, 0x21, 0x4, 0x70bd2d, 0x25dfdbfd, {0x16}, [@typed={0x4, 0x64}, @nested={0x4, 0x25}, @nested={0x1004, 0x8b, [@generic="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"]}]}, 0x1020}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f0000000080)="1fc521a308983073173f553921c28d8bd549224f06b1e80a8eed9c2695401c1a1e0baa8bfd89d9a4ea051f56f1bd129ae716cabf2357886593d46e44069b005536a5144a2d26d81e4a43443faaa06b76261be8e3c0c00ea7cb3413f5f237b86d7ad056069457175f3487a0d9617a2a03b52f3fa24685abf35e3d979a18c72c9c0bd7c3d9d45c9942b601b1fc0ba0b7", &(0x7f0000000180)=""/156}, 0x18) 01:36:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) fsetxattr$security_ima(r2, &(0x7f0000000080)='security.ima\x00', &(0x7f00000001c0)=@v1={0x2, "8ad6bc4c0d91a8795061f0cd1fc93c496df4"}, 0x13, 0x1) write$binfmt_misc(r2, 0x0, 0x0) 01:36:28 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0xcf00000000000000, 0x2000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x8000, 0x2, 0xff, 0x8001, 0x15, 0x6, 0x1, 0x2, 0x7, 0xfffffffffffffffe}) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x7, {0xe369}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='rdma.current\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f00000002c0)) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x4080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.current\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x3, 0x20000) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000240)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000000280)='coredump_filter\x00') getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000400)=""/122, &(0x7f0000000040)=0x7a) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000380)={0x8001}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x9) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) alarm(0x80000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r2, &(0x7f0000000180)="b63db85e1e8d020000040000003ef0011dcc00ffffffd2bc7037cebc9bc2feffffffe22c9b160096619c944f6bed0b668eeb5132ed9b091e26c6f68ce5691d6285aa1fae1a46ba3f96b3ef7f0e34ab4ab3fdc1da4d76884120a62b469cc96fb8f682405979d174a0c9c742b32e8157fa345ef5dba4298808f41a12fbad69ccc0a53ad145c90bd82e537740b27efe20a7a25d308c2cd7cc97cdd33218ce9db8bd2623a062b3d5eebfb0190302700782d4d93d565f457ff269d5ac0d1afab83f23ec626925c7b22955af4a9a59fd55ac08b504ceb5a2de04905d922ac949a3f223eaae7dd12990deb6caa111b71fb469e160dd125688", 0xffffff04) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100)=0xb1, 0x4) 01:36:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02006c000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:28 executing program 5: 01:36:28 executing program 0: socketpair$unix(0x1, 0x800000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:28 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$evdev(r2, &(0x7f0000000140)=[{{0x77359400}, 0x3, 0x5e, 0x6}, {{0x77359400}, 0x4, 0x9, 0x7}, {{}, 0x17, 0x9, 0x4}, {{0x77359400}, 0x3, 0x101}, {{0x77359400}, 0x16, 0x9, 0x100}], 0x78) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x7f, 0x7fff, 0x0, 0x0, 0x100000001, 0x8, 0x6f12, 0x2, 0x9e3, 0x6e, 0x100000001, 0x336d, 0x3, 0xfff, 0x8, 0x10}}) 01:36:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x36801, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) write$binfmt_misc(r2, 0x0, 0x0) 01:36:29 executing program 5: [ 406.924703] sg_write: 9 callbacks suppressed [ 406.924719] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 406.924719] program syz-executor2 not setting count and/or reply_len properly 01:36:29 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:29 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r3, 0x0, 0x0) 01:36:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020007000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x80000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x2, 0x0, 0xb04}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xffffffdb) 01:36:29 executing program 5: [ 407.149488] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 407.149488] program syz-executor2 not setting count and/or reply_len properly 01:36:29 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r1}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:29 executing program 3: 01:36:29 executing program 5: 01:36:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02fbffffff00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, [], 0xd}, 0x7fffffff}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @remote}], 0x6c) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) r4 = getuid() r5 = getegid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r3, r4, r5}, 0xc) 01:36:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sigaltstack(&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f00000000c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:29 executing program 5: 01:36:30 executing program 3: 01:36:30 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000240)={{0x100, 0x3}, 0x10}, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) epoll_pwait(r3, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x4, &(0x7f0000000140)={0x5}, 0x8) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000040)={0x3, 0x8000}) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x0, 0x62) fstat(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) 01:36:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d022900000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:30 executing program 0: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xd2ad, 0x100) fcntl$dupfd(r0, 0x406, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r4, 0x0, 0xfeffff) 01:36:30 executing program 5: 01:36:30 executing program 3: 01:36:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/protocols\x00') write$P9_RUNLINKAT(r2, &(0x7f0000000180)={0x7, 0x4d, 0x1}, 0x7) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r2, &(0x7f00000004c0)="00f364db40ac34ff487367a2c0e50d56c10f17d9d8320f66ca0af2999313de0eeac9fe65722b62f42abcafdf0551c2aa69955bc8f1aecd346ebe0184e64e9713a80bc17230b95fe8947b87c4321d5ae18c3fa4b373bb46bd8d76bbd834bd0f9a2e96282563a38b746f583aeee5c958aa1ebc4a2dd39c9408f4f356c138bb1e8ab7de441813bc0265db77ac563ace6d71c3199fccc735a0b97265f3a395691ef8ee845ef3d662df69995750cec822e2e98a10cb5b436d02c2a6b9fa41be132408406068e182a64e95fdc331d20329168ead2f732018e3c891d105ef45450e263a15f6497f333d23ebf1370b9afa7da593"}, 0x10) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000480)=0x5, 0x8) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0xff18) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000600)={'irlan0\x00', 0x7f, 0x55d4bde8}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000003c0)={0x5}) connect$ax25(r3, &(0x7f0000000400)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48) 01:36:30 executing program 3: [ 408.138041] sg_write: data in/out 688033018/1 bytes for SCSI command 0xff-- guessing data in; [ 408.138041] program syz-executor2 not setting count and/or reply_len properly 01:36:30 executing program 5: 01:36:30 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fadvise64(r2, 0x0, 0x4, 0x5) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x1c0ffc, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='a\x00', r1}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x14) write$binfmt_misc(r2, 0x0, 0xfeffff) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x5, 0x4) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0), 0x4) 01:36:30 executing program 3: clone(0x13102041ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2e) ptrace$setsig(0x4203, r0, 0x0, 0x0) 01:36:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000400003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="b93c564b636700000000b4ce360000a299b7f4d0e305952f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000006dc0)=[{0x1000000f0ffffff, 0xffffff7f00000000, &(0x7f0000001340)=[{&(0x7f0000000180)="1317578d658a964c5c32e1d7d48e18613e92db748e92cd467f2dfab7c5db7b810a", 0x21}], 0x1}], 0x1, 0x0) 01:36:30 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x400) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @bt={0x4, 0x2, 0x1, 0x20, 0x2, 0x1, 0x3, 0x7}}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x10000, 0x20, 0x0, 0x5}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r2, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x8000, 0x2, 0x8}, 0x10) [ 408.536775] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 408.536775] program syz-executor2 not setting count and/or reply_len properly 01:36:30 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) connect$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sync_file_range(r1, 0x7, 0x5, 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$KIOCSOUND(r2, 0x4b2f, 0x71) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r3, 0x0, 0xfeffff) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 01:36:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000800000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:30 executing program 3: sched_setaffinity(0x0, 0xfdf3, &(0x7f0000000180)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='status\x00') write$P9_RLERRORu(r0, 0x0, 0x0) getpeername$unix(r0, &(0x7f0000000100), &(0x7f0000000000)=0x6e) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) 01:36:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="7f"], 0x1) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x5, 0x4) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 01:36:30 executing program 1: openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/47, 0xfffffe75}], 0x1, 0x0) 01:36:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0xfffffffffffffffd, r1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) connect$can_bcm(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) fcntl$setflags(r0, 0x2, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000200)=""/240, &(0x7f0000000300)=0xf0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000003c0)=""/91) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) [ 408.855292] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 408.855292] program syz-executor2 not setting count and/or reply_len properly 01:36:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x420000, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x17) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020003000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_SMI(r1, 0xaeb7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6fa) write(r3, &(0x7f0000000240)="b63db85e1e8d02dc31ef10262d0000000037cebc9bc2feffffffffffffffe22c9b160196aa1fae1a000000000000000000000000000010144dfa03d6743ff19d31e7963f00972fb89e5da9f424f189bd8d72e8b55f4c94009d5daeccd43b64d4e9a71fb142b0efac45e273aa633e444c1993720c88b01113a36b700884cb21a3f5b3b9a4ee13121a456e50f27ba78a454d95f858fe2e4886c72371955ce845de8be977ff6f93aa4d014c0b8a3185ab3077c1d9087c1514", 0xffffffffffffff08) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 01:36:31 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff, 0x101000) [ 409.134483] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 409.134483] program syz-executor2 not setting count and/or reply_len properly 01:36:31 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x7fffffff, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x5, [{{0x2, 0x4e23, @rand_addr=0x4}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @rand_addr=0x9}}]}, 0x310) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={r3, &(0x7f0000000100)=""/27}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x10) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020009000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:31 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x480, 0x44) ioctl$KDDISABIO(r2, 0x4b37) [ 409.472565] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 409.472565] program syz-executor2 not setting count and/or reply_len properly 01:36:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3f) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:31 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) accept4$llc(r2, 0x0, &(0x7f00000000c0), 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2d0, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x22}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xa39, @empty, 0x4dda47f2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @mcast2}}}}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x28}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb765}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62b3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1312}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5822}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7c265e16, @mcast1}}}}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x42}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x2d0}}, 0x40000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r4 = inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000640)={&(0x7f0000000600)=""/28, 0x220000, 0x1800, 0x5}, 0x18) inotify_rm_watch(r2, r4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e22, @rand_addr=0xfffffffffffffff9}}) 01:36:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d024800000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x80000001}, &(0x7f00000000c0)=0x8) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x96, 0x2, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x2}, &(0x7f0000000180)=0x8) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x80, 0x0) write$P9_RMKDIR(r3, &(0x7f0000000200)={0x14, 0x49, 0x1, {0xc8, 0x3, 0x2}}, 0x14) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r5, 0x0, 0xfeffff) 01:36:31 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000001c0)={'tunl0\x00', {0x2, 0x4e24, @rand_addr=0x40}}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000180)=0x1000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x14) [ 409.776926] sg_write: data in/out 1208126714/1 bytes for SCSI command 0xff-- guessing data in; [ 409.776926] program syz-executor2 not setting count and/or reply_len properly 01:36:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d026c00000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 409.931164] sg_write: data in/out 1812106490/1 bytes for SCSI command 0xff-- guessing data in; [ 409.931164] program syz-executor2 not setting count and/or reply_len properly 01:36:32 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000040)) 01:36:32 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) accept4$llc(r2, 0x0, &(0x7f00000000c0), 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2d0, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x22}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xa39, @empty, 0x4dda47f2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @mcast2}}}}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x28}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb765}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62b3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1312}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5822}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7c265e16, @mcast1}}}}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x42}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x2d0}}, 0x40000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r4 = inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000640)={&(0x7f0000000600)=""/28, 0x220000, 0x1800, 0x5}, 0x18) inotify_rm_watch(r2, r4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e22, @rand_addr=0xfffffffffffffff9}}) 01:36:32 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00\x03\x00\x02k\x18\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r1, r0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x24101) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r5, 0x0, 0x0) 01:36:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x80000000000000, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100026bd7000ffdbdf25010000004800020008000b000a000000080007000d00002f6088157ac976f416784069eae300080006007f00000014000100000000000000000000000000000000010800060040000000080009003f00000008000b0002000000080005001f0001000800050000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x684223565e12eaa8) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x22) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0010000033282e2c8f4cb7651d73a3cf9502f2f546b5b280441ae5ed58bd9aaeb4a25ae607ecb17d69d943c8b7a37741698f3ebfa7180791289aa81d8692d1befa57f5ede7141c197be3f12338144c6b4b7c984fdd05e35f118f18e6360e133b598be4ecdd32b04d078e7cda4ba371e51dcb4e8f1a48cfa91dcb1f3f0108062ffd243b60e567ee3658bfc06e9f54ab86e50fab7d2ea577bc50e66a8416a91436307105e0d63941da8d2887972a4f6b8efef4ca0b345c1f2f6c1df98a01323a21f3cc70e8f405e02beb0665e4e3b493afe2a849da7e038810cd6574a08f0b1debd18fd6664e9eae47ea7bf14612a0ec447f2eb1ae8085b8348ca6d9acd4309415018d4c28f4ef915f29d3164d7fd8f574089777e4859a9816109fb0bb79deb19501bcb04b2150411ca3f04e0c08895b2dbf70079c8c9748575a48d85d5e729c312a1770989861d33ef1c3e4b39fcf6c6ab166724333f3c6d7d0f557b58205f6c01cf9825268408e0e62f1dd7104ca50cf86d62760eab5c82671b730ba101d820e243580881ecf80e1f9ecb118ec2cb3c3216012ec6147b94e19dfc87c567479867e60731e6e058c6846926365f54b93ad02f33bf1353e018f1adf1bd0b3c52b3b7760fc16994c0403727b2ef16903084567f4a0c389315ac99be567c7f338b20c456240be999cf7c5862e8a95f738c9a63a53197ca78bcd2802ad6adcdcb7f7c15c48b31e216a0f6183b368c79adb91ee7962d240f57c6f28bc8aeba93c3907e419f302685250f8ad9836873194171a481269dc0773a1174b788c1aa91ac11e12d633dd8ce52d79a12fba117ebfefc8fa07913157aee2769dc468c6632ffac7f101dc8ba56b621f5624885a752825d48bc20eefc9071ac0d32848df362f9e780472e0bc2e4c9c323100b580e75e885eeb9e62f428a12661a87ba20a38abbdeaae1b164efa017e6035320b030090a2e0c40317b0512351649ef75f7899740886ec38e7df1824e68b091e96b9667324ab4806c5f0175f68f621cf92ba30fa6f33066aa255862b7868b3885c53071c9fbe971cf1e06e64115948abf1b2a03e0c6ef9184033efb5e9665a508a45952b4745f6b62653e77a40997b7e7c3e6af9d4fc84bae94ac745d5a85b2e216ecf5ecfe8e98d62ce816bdb61c6120dd7173cb102ecd7e9d02ba521e802c76ad22d4a06059e4187e25d119e6106470866e5af5404ca8854b926463f41a070dbb5463c256ecf8879c0113f047830f5d444d353dabad648735a1019493764c37754e7bf8acc3775797d49c694f38d79d812de59fbb989020efb8d8a7565526b5f55a90718289c148d5981edc855312a89c186068663fcbe86691892b260c790d5d07c64c4d80cc36047caceec0cfdc04e51ca83f533d07e874d0fe7df49ef0e81aba65dad3354677d8fb6cee5c6829351d8aa7b95253df8900f4e74f079a0da0f57a7ebd2b971ec5432692db778803a6c5af85b5783bc56b33cec347f440cf6ad6ea76e021a64795badd4f8a09e444095e9610710dc2e4ccd21681e62a0e8f49ca2ce4f05583d3ff16578b6734aeaaf3146afe442c862e6f5a603c720ffe5bab0cf01c140427e2c5a94aea3b667fd2a5c85f27f430a87c38be1136238b210667d05d8eb6e23cd3f257acdb23194b0f0de216fa9dd9da26b52056376403622478a57d1cd22f5c11a3466a96f00132abb32c385a4cf0929799f32c5e30c1f79ba85ffeaabdb11250aad4f71335286890f6f0bff1bddc94aed7f8e9366011d0cb24035b052e2e1d13272b0ef354888c59218b95764475b4e6ab57791342e1af98d9751684c5b592954a8e133a0d88e71ff53a8cbb072bff258cc6d564fb9c19617f3d2ce1c07a08a8147ca9b552aa0139eb1de6817a1098407cfe1d94c605427a1949c0501c6a8f81f2d3c857977aa4cdaa73ce1dbbeff717d73e01b611dce9b74f4c772f729387f8839dd2144619c7e61f81bc9d5bec5fd687721da844c11961e992be3c2682d98ea920d4defc3fec41e3d94428aed5afbb610501fef9a335b1ac30b6b75ae7bdf2a4db01701d8467d2bae700625d2ed7d15d45aace9b1a084057078ffab139e92a339b172ca5b3c154efe5952c466b15a9965be69ba6ab649006457ca8ae8153ec36ac855285a8e97e4c51f8fab0c6be3e02dff3a659b9bf424e7c2c06f8ce46fdbc43664598a6045824e1d58efaf5817afbdc173e5009f1f46d0d00c90887e8252a0973b425bb681e569be55c350d71e11cf57b17b9e1aae944a573b164bf570019686afbe12e3e7787a3e189a2603a1892e7cb076f318855b314f28b4942fecc5afdc0dd3da9d0807cfec22ca7ae68f33c52511a0886d932cd0a089cbf0223f58154b1a7b2290512c07fb33f49e967a650bfa2baf8facf361c10ce448e32a9aec1c8807933a85e38d6172efad3e1062d4d151773801bd012efbaf314768501ad7aa83fe6250aecbe08a63f742b59a621e844d13aa7c6ca39254d744c0e733f07f1332709b4f1ba72721d300a7288a8090c9ce3f955e7dd5213b96edb1a0cd861846d76f3a78c55626e76d668f79b65d0f0d8a1a7179041acb8139c83300d563c5fe2ff4c66b89af8e51d0ecea59d26c01e134fe3c606869c21a191038a5220991c2bf8dfa0364acc74da1bc83729960257928bbded90c707ecae38b74f450574a6a611c89056517d804fdff9a738788b932052cc79471b5fcd99d09296b0467d6fd617a3c419c0c440a38b82ad574290f3aee977bcf4932e6c90cfcfa9c97b6a7a29174a35adc869a9ea3e7a34755a80dcc37ea2461d5fad854d46a19e6be999bb1f296d9d57f1ffa49c485ef0c65b991f984074a73e7cc640c6e255f704d85f52bd13cd7a9418be0279761321be2ea01cf33220bcfab356a338d49af2307b5ce40e1cf17dcdca8849242bcbf9f1ee25a73f3c020dbfccbc79ee718792e0b5997c0805576ae8e531824d4fd2fe45a6ec88368ea5f7db58a13e61c5ad4ff9895d7ca365d58cbf74c2ee2a9c51da388023791fc242895f88994890e114967e274255cdd82463f1f8ebf9b22d23bcd0cff150bde471d2924ace7a9118d8819f5d929506e48887e16561eba2f615a008a16372dafdd1956f031579c464f031f4576c095e9adaa5eb7c2ac24e2a723fd3e21e524520768bbdf38b7eac6577cd3341b57eada0ac5c16addc9c5779fe4ff75f15fc1c3931f4768acef9ad29075124cbdcedd130029dac513d4604062c4f6eab391ef5781cc839ca34ced0cdf455db5cf0789d6c65c91b23997dd233a87bf85dc8620b81ad1d5de0ba333c3892510b9f68ddd715611cea7dd562a9629ce149129dee4d32ad1e25120a7f06994e563d5da82fbf403397a25ddabe6e6c4825f7f295fa509ccbbd5a11988c5cf5b66ea29a1490f00379cedeb1e7101ef9e8affc4f182af774ffb4a59ea10f86455d31030d1fe4500a5b3a7d8b3feb795fbe65a85f7bb5e4eaba8f0e7d87138cb67067c0a1bd8f7baa9e17e02b77ff859c9c19d7f6befe851c887b6ce368c8faf569c7355888c4741db0dced3b83cb4e961cb045ced4e5d17a29e377766b667cea00ae9674cefc03cffd4bb54adb72853fd65ea3c5bf8bd758ecf730cacdde15c3aff5cac92552264fbdba8093741f0d4af279a05c39c3e74fa28328b8a8e6b473c214659218d79b692ef51f4d85568b8b3968ac94bef12e5bbcaf99b0beac450f6991b998655b020aad3136d32483e529cafc84ed6aab51e00d2e5b09010383095e78a144d69407520a9987e25abcb828ffa84cd84143ccf211299b9b2bd581969cd95595bb20205edfd899d720fe4f6933a2e7ef855662f60236831ec991a1169fa7ef05cc1f2bba776a03d16ba1bfde80b8f7f42acd51be33ed90796408d09a231a312a4c8cd6a9707a6458ed2af61ea24a8726b946a8e5e05317aba624e41727ac0dd853dbca69f20b58d9620e6c828a194009e7a9e9e5655c5ecab4afd77571cab61fdf0e16b1fec8736b9d0bf8980373e7e92b6a82acdb7bbe1c121084851825bb65dad77493abc920f554f050a2c3c9637b8e2500cd5da58fde47327f92dc5e348982803120f968f0c706c2a2715ed84cf2b76ac31ed2e70b6ba1f541e97f965975560807c7b91851e476d3473b8556d669b6d225a46f687a322586f55a8a0b47b5a628692e1f0b9770fdc5381e77d5ebf3840862dd6d04eaa45627879dbf70f0801f44a6a69db4846ddd27fde94c979a74f02cbbe777c17b9c5dc8a7664d23530c851ad0cb8d129f77898302c93a2f69595543f1c66e260915587360535fb547a71b094104106dde47871f74928cc00b899e38b674f8f088dffceeb4dcea5acb0d99535477fd4587c6ca4a3c738f49c1750e642aaf2d6bbbdc348801625f38dc60ad9f783389b8a741d750b691355df4804bac519e87134f9c6bc1ea61415a3e227791e4fe1912e06b40cc6245f18023e40569d91e282a33be951c96427729916244edba80d9637a7f7abf3044532ff283393d47ba5ad1c0fadb2b57094feae8ef41424b54a97ea5ff88b1122ec326aff6a6c47425cda8cc561d42d4a1b0317e514e8613101ea3d80f283b41529a445e6b2b6124a3d4f8cd857160315c61fddc7119077ec680ffb3d65915f1971e8a0b9450520ce1f528adcb4d0b19af929fc524798592c19ef80d3a03a7dca3f637a4dcfd8dff533aa38c97e93836144a7bd5d798b9e32deefcc1f481accd4585d24ee5daeb1188658dbefbdf9ad45f8dc0741df1d51d9b1991b4a8f72aa6b3acd66f85a75675688691644d66bb77de4d4336485c06064399dffca1aac844748a916425cc51874a5a77ed950b1831e410a79ff2f22c1bd7e69b95c0ca9da499c65f02bcdcc78a85fc877f8c900f34587a0e85cd6aadc0f3838bd715fb2bde2ad2b3667714521fa8fa294ced320843fe8cf7b02286e7f56d8ece7fc318bfb42379fd2435cc1194e5f71a0f89f47a14c0e8e3b9a4633328ddbc26dd3468b8abb6a3386783534eabee2efb21d95d4e607b92564fb1ccc9802bfd8c999b90852991858e83492cec530fc689ac53519b459c24f6b7b411a4249d07bf0159cfd71182abd4f0c5f444915aff6a992fbd29130a68d8eed3f0bba69e9b0505487ee2641e7ee719c961f3ab7bb122a71d1c678df678e47d7a8ef85a95c664e8fb5cdb5e04ae58ccc481128aff4412bfe9806fa52ecf45aefd8910d9748fd23ea7ef379bc13dd22cae571ccb39339267ca48dbf003c292cfa05c450b044e93d956ed46a069a66e8ec179bc3c4806c31842d7e59d2f7500e5de18f95038bbea849db9a45e357ea0dbc58c6ff61d97b28d14efaef22b5d1b6f791376927e4961998a4934be77f0db66f2d1bafd83bf8d21b86fcfc1fb919c27a8c5aea3455cc4faba9a7f6d23a2425cf67630ef5dc4b9e2a6de6526d9c2f3dfd1cf3ffc61a3ae88d49ea2eddfd07351e3154647f985c53472c9f1237370885609cd731b225ab330e235bec02194747d4f360dad9bc738c052439881f6be440b934ef4c53a73be5cbac4f91b843e1dc17af88e4b8549430cc22392ff98707420657e744079fc060731865da52b011e2b79d89aa93f024ece1e42b3971991a1f01e8364b7e4daf84b6ef4ff9f9cda321866f6d1bd91a5a2d130125524edbceca6ead77fffd627f364c31b2c5a17b0e926b22f9043aaa0a98f9fb5fb886eed0e93cdf1a837eca93d8357a29448b88a5fd83d287676a8c190a2ae710f96a31cd43dea94aef8133c0ae5479d7"], &(0x7f0000000340)=0x1008) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x7, 0xffffffffffff8001}, &(0x7f0000001440)=0x8) r6 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000001480)={r4, 0x6, 0x6, 0x3, 0x2, 0x6, 0x3, 0x7f7, {r5, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x8}}, 0x3f, 0x10000, 0x3, 0xfffffffffffffff9, 0x1000}}, &(0x7f0000001540)=0xb0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000001640)={'ipvs\x00'}, &(0x7f0000001680)=0x1e) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000013c0)=0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x4, 0x80000001, 0x8, 0x10001, 0x0, 0x6, 0x4, 0x1, 0x2, 0x5, 0x6, 0x400, 0x9, 0x5, 0x81, 0x10001, 0x6, 0x9, 0x1, 0xffffffff, 0x7, 0x3, 0xbc00, 0x55, 0x8001, 0x4, 0x80000001, 0x80, 0x8, 0x4, 0x8, 0xe179, 0x100000001, 0xfffffffffffff000, 0x0, 0x1d, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x400}, 0x1000, 0x2, 0x0, 0x5, 0x40ae, 0x1, 0xd4}, r7, 0xa, r6, 0x8) syz_genetlink_get_family_id$nbd(&(0x7f0000001580)='nbd\x00') setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x81, 0x2) 01:36:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000003000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCRSACCEPT(r1, 0x89e3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) [ 410.081936] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 410.081936] program syz-executor2 not setting count and/or reply_len properly 01:36:32 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) accept4$llc(r2, 0x0, &(0x7f00000000c0), 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2d0, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x22}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffff4e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xa39, @empty, 0x4dda47f2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @mcast2}}}}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x28}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb765}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x62b3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1312}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5822}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7c265e16, @mcast1}}}}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x42}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x2d0}}, 0x40000) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r4 = inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x800) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000640)={&(0x7f0000000600)=""/28, 0x220000, 0x1800, 0x5}, 0x18) inotify_rm_watch(r2, r4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x4e22, @rand_addr=0xfffffffffffffff9}}) [ 410.130372] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.138033] bridge0: port 1(bridge_slave_0) entered disabled state 01:36:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000006000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 410.179724] device bridge0 left promiscuous mode 01:36:32 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a5c1f023c126285719070") r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="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", 0xfb}], 0x1}, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x20000000000000, 0x2000008002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = getpgrp(0xffffffffffffffff) r5 = getpgrp(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000100)={r3, r2, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) [ 410.462218] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.468766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.475558] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.481997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.490724] device bridge0 entered promiscuous mode [ 410.496720] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 01:36:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020400000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00\x03\x00\x02k\x18\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r1, r0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x24101) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r5, 0x0, 0x0) 01:36:32 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8208}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x901, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r4, 0x0, 0xfeffff) 01:36:32 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00\x03\x00\x02k\x18\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r1, r0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x24101) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r5, 0x0, 0x0) [ 410.634193] netlink: 215 bytes leftover after parsing attributes in process `syz-executor1'. 01:36:32 executing program 4: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/154, 0x9a}], 0x1, &(0x7f00000002c0)=""/39, 0x27}, 0x40012000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000440)={0x1a, "b632d74492272e4f6227219e825f1d2310e1b0b73dffa16e6b6764b718b894f7b9da0f08fb4841cbad5ef5c39a50f4e83b06c2e9997fe4af4746bf9c3933a5f300bb93e7922566fb1cbc0d9fa0b10486db2e3f69c321a929a585e0dc165fd8201c19bfa859e0da4f285e67e1f7c19fed14c829dfe666a2f240fd11a9819afe68"}) write(r1, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x7fffffff, @remote, 0xffff}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x4, @local, 0x40}, @in6={0xa, 0x4e24, 0x9, @mcast2, 0x3}, @in6={0xa, 0x4e22, 0xa60f, @loopback, 0x1}], 0x80) [ 410.690224] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.700367] bridge0: port 1(bridge_slave_0) entered disabled state 01:36:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x100000000000, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) syz_emit_ethernet(0xd2, &(0x7f0000000180)={@dev={[], 0x18}, @broadcast, [{[], {0x8100, 0x2, 0xf70e00, 0x1}}], {@mpls_uc={0x8847, {[{0x3, 0x200, 0x401, 0xfb07}, {0xfffffffffffffffc, 0x789319da, 0x8, 0x1f}, {0x5, 0x101, 0x8, 0x3}, {0x8001, 0xfffffffe000000, 0xcca5, 0x3}, {0x1, 0x6, 0x71, 0x7f}], @ipv4={{0xe, 0x4, 0x6, 0xba37, 0xac, 0x64, 0x3, 0x10000, 0x5c, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @generic={0xcf, 0xf, "474e153a5643aabb40a93ca0cd"}, @generic={0x94, 0x12, "fc55a4bd08cb0a81fe927d56ff08c41f"}]}}, @dccp={{0x4e23, 0x4e22, 0x4, 0x1, 0x9a80, 0x0, 0x0, 0xf, 0x7, 'h-u', 0x4b, 'BL\"'}, "21c3b7f17aa6e6ad54a66358c46bb48565519407a6c9c22f532e0c8a65d4e70514457ed7014b4630ce5821ea1628ea8953309341ccfde25e565a96c5b44fdfc03b36accda0ccc301fe600b594691e7700303617387907bbce5c201964861d096ce50f83c"}}}}}}, &(0x7f0000000280)={0x1, 0x3, [0x8c1, 0x69f, 0xca2, 0x9d]}) [ 411.064809] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.071282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.078064] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.084497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.106126] device bridge0 entered promiscuous mode 01:36:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020020000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 411.113884] netlink: 215 bytes leftover after parsing attributes in process `syz-executor1'. [ 411.131224] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.137815] bridge0: port 1(bridge_slave_0) entered disabled state 01:36:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigaction(0x12, &(0x7f0000000180)={&(0x7f0000000000)="42dcdd3ef313899174a2ee26437a01c4827d0f4b0d46fcc4e189fa658dc4417560c2430f01c2c4a27d785700a4", {0x6}, 0x80000000, &(0x7f0000000140)="670f3806a1c5ea000066f30fd6ec8f89b89ba303000000c4c181fc8f65566666651436f3abc40115e3e4d9f566660fc5fce9d9fa"}, &(0x7f00000002c0)={&(0x7f0000000240)="f2abc441a1dff5c481781307c463dd7c3d02000000000f0ff6b6c4221197d0dbedc4427d19a97865000066460f552fc402e99d20", {}, 0x0, &(0x7f0000000280)="c482512f3c6ed9f5c4215d661ecfc421f9fa2d000880413e0bd88f0978d24dc0c482c12bf1c4235d5dae373f000000c42279bda75f000000"}, 0x8, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="4c313a0e08701cdd9400cf822db904cb", 0x10) [ 411.162230] device bridge0 left promiscuous mode 01:36:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0xfffffffffffffd46}], 0x1) 01:36:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00\x03\x00\x02k\x18\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r1, r0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x24101) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r5, 0x0, 0x0) [ 411.338265] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.344760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.351490] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.357961] bridge0: port 1(bridge_slave_0) entered forwarding state 01:36:33 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000000c0)={0x2, 0x8436, 0xfffffffffffffffe, 0x0, 0x1f7, 0x80000000}) dup3(r0, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x40000400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) [ 411.421014] device bridge0 entered promiscuous mode [ 411.432863] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 411.444819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 01:36:33 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00\x03\x00\x02k\x18\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r1, r0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7fff, 0x24101) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r5, 0x0, 0x0) 01:36:33 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x401, 0x82001) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x3, 0x0, 0xffffffffffffffff) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r1, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x4, 0x402) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000200), 0x4) 01:36:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000100003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r3, 0x0, 0xfeffff) [ 411.570019] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.577839] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.658079] device bridge0 left promiscuous mode 01:36:33 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0x0, 0x7, {0x400}}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000040)=r3) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380), 0x0) [ 412.004503] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.011035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.018912] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.025326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.032264] device bridge0 entered promiscuous mode [ 412.039628] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.046271] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.053295] device bridge0 left promiscuous mode 01:36:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) write$FUSE_STATFS(r10, &(0x7f0000005000)={0x4b, 0x0, 0x1, {{0x0, 0x0, 0x6, 0x6, 0x1, 0x9, 0x80}}}, 0x60) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) write$binfmt_misc(r11, 0x0, 0xfeffff) [ 412.271517] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.278016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.284685] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.291060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.302668] device bridge0 entered promiscuous mode 01:36:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02ae00000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x220800, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0xc0000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000200)={r4, 0x8}) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000240)) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000280)=""/104, &(0x7f0000000300)=0x68) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x10000801d) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:34 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x40000) sendfile(r0, r0, &(0x7f0000000080), 0x5f138520) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000180)=0x915, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x81, 0x1ffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x2, 0x7, 0x6, 0x3}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000040)=[0x1], 0x1, 0xfffffffffffffffe, 0x7fffffff, 0x2, 0xdb, 0x4, {0x1, 0x54, 0x2, 0x2, 0x0, 0x3, 0x6, 0x5, 0x7fff, 0x5, 0x4, 0x1f, 0x80000000, 0x7ff, "37b2a3cbe8a402af5a12d5d66c9ab533d3a4df4cda3c5a50c1230617b7299197"}}) write(r1, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r3, &(0x7f0000000380), 0x0) 01:36:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020068000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:34 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:34 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x40000) sendfile(r0, r0, &(0x7f0000000080), 0x5f138520) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000180)=0x915, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x81, 0x1ffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x2, 0x7, 0x6, 0x3}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000040)=[0x1], 0x1, 0xfffffffffffffffe, 0x7fffffff, 0x2, 0xdb, 0x4, {0x1, 0x54, 0x2, 0x2, 0x0, 0x3, 0x6, 0x5, 0x7fff, 0x5, 0x4, 0x1f, 0x80000000, 0x7ff, "37b2a3cbe8a402af5a12d5d66c9ab533d3a4df4cda3c5a50c1230617b7299197"}}) write(r1, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r3, &(0x7f0000000380), 0x0) 01:36:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8000020a00, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x0, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4593}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4091) r6 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x0, 0x20000) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) r7 = msgget(0x0, 0x290) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000340)={0x9, 0xbc0c}) msgrcv(r7, &(0x7f0000000280)={0x0, ""/117}, 0x7d, 0x0, 0x1000) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f00000003c0)=0x1) write$binfmt_misc(r4, 0x0, 0xfeffff) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f0000000380)) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000240)='ip_vti0\x00') [ 412.623047] audit: type=1804 audit(1545701794.724:69): pid=20964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/509/bus" dev="sda1" ino=17534 res=1 [ 412.628948] sg_write: 4 callbacks suppressed [ 412.628970] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 412.628970] program syz-executor2 not setting count and/or reply_len properly 01:36:34 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) sendto$rose(r0, &(0x7f0000000140)="5a08d4443b9d6db6c83f08b9d38c07aa2da4f2c20b40d9d06e21726eb9ada09d3d406d0b98c8e0fac44e51e90d1c62558629f22acc351d22a0778144214091e7ee6026e871174a7a09495d778e3442243eedf41873b9080e5672d6b20fd1d2d003b564a28eb85dd739a76218ff16fd16da", 0x71, 0x0, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x7) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02fa0c000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:35 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x40000) sendfile(r0, r0, &(0x7f0000000080), 0x5f138520) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000180)=0x915, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x81, 0x1ffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x2, 0x7, 0x6, 0x3}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000040)=[0x1], 0x1, 0xfffffffffffffffe, 0x7fffffff, 0x2, 0xdb, 0x4, {0x1, 0x54, 0x2, 0x2, 0x0, 0x3, 0x6, 0x5, 0x7fff, 0x5, 0x4, 0x1f, 0x80000000, 0x7ff, "37b2a3cbe8a402af5a12d5d66c9ab533d3a4df4cda3c5a50c1230617b7299197"}}) write(r1, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r3, &(0x7f0000000380), 0x0) 01:36:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) write$FUSE_STATFS(r10, &(0x7f0000005000)={0x4b, 0x0, 0x1, {{0x0, 0x0, 0x6, 0x6, 0x1, 0x9, 0x80}}}, 0x60) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) write$binfmt_misc(r11, 0x0, 0xfeffff) 01:36:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_RESIZE(r2, 0x5609, 0x0) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000180)={0x1, "97c71d43866cdfa32efe3dc1d7eddfc835028d39ca46fab1a2351b180b4a82ed", 0x0, 0xffffffffffffff00, 0x3, 0xc}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) 01:36:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000003c0)=""/4096) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000027c0)={@initdev, @local, 0x0}, &(0x7f0000002800)=0xc) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x21bb) bind$packet(r1, &(0x7f0000002840)={0x11, 0x0, r3, 0x1, 0x100000000}, 0x14) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$EXT4_IOC_RESIZE_FS(r2, 0x40086610, &(0x7f0000000180)=0x10001) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000001c0)={0x2, 0x9c5}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000004800003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000300)={0x18, 0x0, {0x1, @broadcast, 'bond_slave_0\x00'}}) r3 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x9, 0x280000) write(r1, &(0x7f00000003c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xe) socket$caif_seqpacket(0x25, 0x5, 0x3) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) [ 413.543091] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 413.543091] program syz-executor2 not setting count and/or reply_len properly 01:36:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:35 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6) preadv(r0, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x401}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1, 0x0) [ 413.597308] audit: type=1804 audit(1545701795.694:70): pid=21024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/510/bus" dev="sda1" ino=17529 res=1 01:36:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020074000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 413.881930] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 413.881930] program syz-executor2 not setting count and/or reply_len properly 01:36:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) write$FUSE_STATFS(r10, &(0x7f0000005000)={0x4b, 0x0, 0x1, {{0x0, 0x0, 0x6, 0x6, 0x1, 0x9, 0x80}}}, 0x60) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) write$binfmt_misc(r11, 0x0, 0xfeffff) 01:36:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x9) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:36 executing program 3: getpgid(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xffffffff, 0x40000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xfffffffffffffffc, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x6000000, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) syz_open_pts(r3, 0x101000) write$binfmt_misc(r3, 0x0, 0x0) 01:36:36 executing program 1: r0 = dup(0xffffffffffffff9c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x103000, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000140)={0x1, 0x1, @start={0x2, 0x1}}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000000280)=""/135}, {&(0x7f0000000340)=""/244}, {&(0x7f0000000440)=""/43}, {&(0x7f0000000480)=""/95}, {&(0x7f0000000500)=""/4096}], 0x100000b7, 0x0) 01:36:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000050000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 414.353543] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 414.353543] program syz-executor2 not setting count and/or reply_len properly 01:36:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = fcntl$dupfd(r0, 0x409, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x117, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r2, 0x1c, 0x1, @ib={0x1b, 0x4, 0x101, {"ec42b9fc5334280e6987e1c4b556552e"}, 0x0, 0x1, 0x8}}}, 0xa0) 01:36:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02007a000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x12c, r2, 0xa00, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47b2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @local}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb58}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x425f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd1f4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x0, "f2831ea0048be5de"}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:36 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x3, 0x3efa}, 0x0, 0x3, 0x5, {0x65, 0x4}, 0x2, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r3, 0x0, 0xfeffff) [ 414.591746] audit: type=1804 audit(1545701796.684:71): pid=21081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/511/bus" dev="sda1" ino=17525 res=1 [ 414.625057] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 414.625057] program syz-executor2 not setting count and/or reply_len properly 01:36:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) syz_extract_tcp_res(&(0x7f0000000100), 0x0, 0x44) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x101400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020068000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 414.945061] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 414.945061] program syz-executor2 not setting count and/or reply_len properly 01:36:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) write$FUSE_STATFS(r10, &(0x7f0000005000)={0x4b, 0x0, 0x1, {{0x0, 0x0, 0x6, 0x6, 0x1, 0x9, 0x80}}}, 0x60) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:37 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) syz_open_dev$swradio(&(0x7f00000003c0)='/dev/swradio#\x00', 0x1, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000440)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffc00, 0x319801) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000140)={0x27, 0x9, 0xfffffffffffffffc, 0x13, 0x6, 0x3, 0x0, 0x152}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000240)=0x7) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000380)={r2, 0xffffffffffff9a8e}, 0x8) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000001c0)=0x9) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000002c0)={0xd, 0x4, 0x7}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 01:36:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000180)={0x1, 0x0, {0x101, 0x7, 0x1, 0xf, 0x0, 0x5, 0x2, 0x7}}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000100)) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x13, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80000004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f00000000c0)) getsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100), &(0x7f0000000180)=0x4) write$binfmt_misc(r2, 0x0, 0x0) 01:36:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) memfd_create(&(0x7f0000000080)='^ppp0\x00', 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="afce73411ad9d5cf0dca43a2621f725bfab465c145e156884b535fdf095739829559868d313f0d290b1b1a7e8c0a3c66db49841a43e67f1f9221abfdc47a1140191e49760d37bf912a9d5f6d943729f7ba45c56034ec2bffd6142c12b57140d6251723b372af83a5c8f4188caef43082bb2f2f50f30e350710c68de34b9ff5c160db5e9f91171bd08f87ad77065d16deeeae090218ce147d75680eb02c2654d644f61666ec02e95c041047f2a16b697c8ff4bdcf134379d8b35d10de6bb4247b057167b451b805bef0d8f69762f37d43df30ab7d6fa8b35f37d155d8ae8c16677356fd4d5db32e7257588e609e7d44f5757b9dc44a22e6c2548ae830e0f8f232") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) 01:36:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000001003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 415.340881] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 415.340881] program syz-executor2 not setting count and/or reply_len properly 01:36:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x4000000, 0x8002) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xb4, "b60c375420db50d60c631bf2669822a1433de00085b6430097103854f3c9bfbc64812f39c844c22e48d8d1a38e31a75c6000b892770880de5d811fa95be88cfd5db7c0026ce374b34fff8b934689d74e5e951af3a11d0b6f0a8cda58448f991da0f67c87024df19fe006755ea6fced4bb38fa7bba0983cc73207cc47c843b23546c0abd599eb34edcb9714b8bcb7d31a9febb0e3d2b393e4ea2755ab205097664348ad5fcee5df60677339274580eee4f8649552"}, &(0x7f0000000080)=0xbc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x100}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r2, 0x40, 0x5c, 0x0, 0x3, 0x33, 0x9, 0xfffffffffffffff8, {r3, @in6={{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9c}}, 0x80, 0x7ff, 0x3, 0x275, 0x5}}, &(0x7f0000000340)=0xb0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000340), 0x10000000000002b7) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000100)={0xa, [0xfffffffff53c88a6, 0xfffffffffffffffd, 0x8, 0xfffffffffffffff7, 0xff93, 0x6, 0xdb, 0x6, 0x1ff, 0x9]}, 0x18) 01:36:37 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xff, 0x8100) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x4040) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x101880, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x404000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2000000200000007) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20000400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0x0) 01:36:37 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4000, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r3, 0x0, 0xfeffff) 01:36:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000068003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 415.475865] audit: type=1804 audit(1545701797.574:72): pid=21135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/512/bus" dev="sda1" ino=17540 res=1 01:36:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='ppp1eth0\x00', 0xfffffffffffffffa) keyctl$clear(0x7, r2) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) [ 415.645849] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 415.645849] program syz-executor2 not setting count and/or reply_len properly 01:36:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) write$FUSE_STATFS(r10, &(0x7f0000005000)={0x4b, 0x0, 0x1, {{0x0, 0x0, 0x6, 0x6, 0x1, 0x9, 0x80}}}, 0x60) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:38 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x1000000000000178, 0x0) 01:36:38 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x4) write$binfmt_misc(r2, 0x0, 0xfeffff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x8000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @multicast2}}, [0x6, 0x0, 0x7fff, 0x8, 0xfffffffffffffff7, 0x100000000, 0x571f, 0xd4d, 0x100000000, 0x20, 0x2, 0x7, 0x5, 0x1, 0x9]}, &(0x7f0000000100)=0x100) 01:36:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020009000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x2000004, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xfff, 0x44000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000100)={0x0, {0x1312ac06}}) 01:36:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) [ 416.334277] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 416.334277] program syz-executor2 not setting count and/or reply_len properly 01:36:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x48, 0x1, 0x28}]}, &(0x7f0000000040)='\x19\xb7G>b\xc6\x05eA\x94\xed\b\xce\'\xf1\xeabu*aJ\xd68v\xa9\x01\xcb\xde\xf6\xde5O]\xf8\xd9\x8f\x86\b3\xcf\x95Mr*\x19\x18Y\xca\xe7\x87^\x9d40\x9e\xca\x91&5\x1b\x1c\xcac}\x15&\x06O\x9e\xe1\x85/\x02\x1a\xff\x90\x04\xab\x11\xae\x96h\xc3\xcf\x17\x17\xce\xe0\xd3\x9e\xdagk\xb7C?\xd9\xd0}\xd8\v\x1e(\xe4\x8c\xb3+g[\xdb\x03\x1d\x8f\x11\x9e', 0xffffffffffffffff, 0x409, &(0x7f00000000c0)=""/251, 0x0, 0x0, [], 0x0, 0xe}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000000c0)={r3, 0x1e}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/135, 0x87}], 0x100000000000019e) 01:36:38 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240)) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x400000, 0x0) setsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f00000002c0)="791b9cb3252050811e561096b8630786ca2463e21e333212124932df3e393a7e54d2a888e0eb68e1e540777e93c7b2da28488147b37f6ef06729c0981378ef1769151aeb223d58084c6afa50abe2e6c784114f7b2a1deb34bc3d96a09cccdb7841f89d2a10f5bd7cd41e95a0124be6ccad52b7f0371c57a526920ab1ec9d4cadebed7a88cdfe7b5eb2315ca26d50754b6101e14f2a77b5c7f5fa4a6f801dfb9af731c36c72d76196f3a95df03bd63256dcf789e32488f87a529d7a5bda9986f820294bdc229e631ff8480f8177a3d2be", 0xfffffffffffffdb6) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000000c0)=0x3, 0x4) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000040)={0x1, "31428dc0c78dacbb73ec8724afb1717aae4ec9ccf41880bd2364a783995432fa", 0x3, 0x1}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x4, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r3, 0x0, 0xfeffff) 01:36:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000007a003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 416.468094] audit: type=1804 audit(1545701798.564:73): pid=21190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/513/bus" dev="sda1" ino=17565 res=1 [ 416.640025] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 416.640025] program syz-executor2 not setting count and/or reply_len properly 01:36:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x80086601, 0x0) [ 416.675898] audit: type=1400 audit(1545701798.774:74): avc: denied { prog_run } for pid=21193 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 01:36:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) write$FUSE_STATFS(r10, &(0x7f0000005000)={0x4b, 0x0, 0x1, {{0x0, 0x0, 0x6, 0x6, 0x1, 0x9, 0x80}}}, 0x60) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:39 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0xfff, {{0x2, 0x4e22, @empty}}}, 0x88) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x40) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f00000000c0)={0x9, 0x0, 0xffffffff, 0x5}) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x4d8, 0x4) prctl$PR_SET_ENDIAN(0x14, 0x3) fcntl$getown(r2, 0x9) 01:36:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x15, 0xf9, &(0x7f0000000180)="2db73dd1907d9ac2a05ba8b69d34a0cf3a57319639788553735a020175770f81721c1119ebd964123657c5fd20b5f7adba3d6612b83c3ae22f83b6cf6ce8081bd971274080d5e8f61efeb74dfb43a1aa46ba5704c6455df28b98b7d1c4053308678df6d110846efc66739de619c75e065624fab0a170bb20401b5b0d149ebf7fec6279bd303a4495d5b845af6ea53477fb26e652f6560f36e1c6c59c59482c8c85b1da412cc409e2b16d79a1ed61675d3ccfb9bedaff1631ca32386566f03037764f375002eeb72646c6cd9cca827db14566ad5438c1f7d1164aa4f6dcba0c0309dd0aa45641c9a7f7bb7a30958ac6d7ad236469fd15f468da"}) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000002003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) r4 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xe8) r6 = geteuid() r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b00)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x8c, r7, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x514c0517}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x15) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x57, 0x8, &(0x7f0000000500)=[{&(0x7f0000000100)="c301c9fcc3f94dfe4123860f83aae3df291ad782fb0a3d80946e65bc34dcdb983aec090235c67b2117d5444f267c7e1fa58a0fcc153d5bc945801bafcc", 0x3d, 0x8}, {&(0x7f0000000180)="22d5", 0x2, 0x5}, {&(0x7f00000001c0)="8e3d29cb58acc4a3bc894862a8cd82940ae5666c", 0x14, 0x3}, {&(0x7f0000000200)="24edb2fe082c51d60e24f263398e3ecce73f99d21e9561f1aa1356d4241f610a244b1541b33b2343096e0b3b464248a173683a9215d16bbd32a809cdd42e", 0x3e, 0x3f}, {&(0x7f0000000240)="c55388ed5588c8a2b8bd79484eeabe6b009c85fcfd90880c371c818430566100a169228bae0d0510ab9f2332383509c2bafe6359d9707239e35b935245616b46303ba0c1b3efe0e027a732831794751bb9139489f1c1eab6680bcd5793b7d4ccf1ebcd04e1cad776c3664fd3b236d78028d63f81c484e4674191dc6107279d586a8cf7bc1d46af9e2e7e27b3b0044bf883910d3e60851bfc4ca13c187ea24a33281453997babd534b20976ce20b52bf6b17fc9a60a77d22ee0a1f0096c00d9ff5ae20ac86756e43bc5c90c1e92f7fb5e8130327b09842c21f351642656407b23fcc8949357be96ebe7", 0xe9}, {&(0x7f0000000340)="9177210e47eec050cd4288f88e719eb59df14f4ba0f0590d9340d83ce9a07c83e0636eb280e428b731185ff72c990a1655d0468f8de214aafb154df89eb60aeb6087776e6326190627e1ca215de2e3369af97aa9670ffac9d15bd4c84a754a024d420a36157cad7330a32f417cf3573f03ed526dce69d87fa8ec8f9c9ef9291c65eedef29f616de3e9139c9ecbbdc0ce3d0070579f4be10728499dcb9da9cada4cd867f65d9044cd4a1d320a5d822e6ef1b60d465d9f1d2c2e96d56ca687f72ade505c75f9d475d58f8651cb990b1fcb564ba114b452c34f06ad3d48", 0xdc, 0xdb8}, {&(0x7f0000000440)="539a0d5c45", 0x5, 0xfffffffff99e033c}, {&(0x7f0000000480)="736c14f2478a5fcb18d597b52d39ce0cdd910487be29b0723e88561add978f50681e50d792ddf4dea2d2d1efc8bcdf1447c09149058dbfaea176439dfcf14ccc67510336f4581d431e6c29f566f098065fbf3cc9881be1bf79f79ccdb9b604998241b9f79b8c", 0x66, 0x1800000000}], 0x9932bcc722fdff92, &(0x7f0000000840)={[{@user_xattr='user_xattr'}, {@fault_injection={'fault_injection'}}, {@noacl='noacl'}, {@noacl='noacl'}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@fowner_lt={'fowner<', r5}}, {@uid_gt={'uid>', r6}}, {@fowner_gt={'fowner>', r8}}]}) write$binfmt_misc(r1, 0x0, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000ac0)={{&(0x7f0000000b40)=""/4096, 0x1000}, &(0x7f0000000940), 0x4}, 0x20) 01:36:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x5421, 0x0) 01:36:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = semget$private(0x0, 0x2, 0x10) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000180)=""/237) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x211) 01:36:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x4020940d, 0x0) 01:36:39 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:36:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200006c0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) [ 417.463902] audit: type=1804 audit(1545701799.564:75): pid=21248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/514/bus" dev="sda1" ino=17588 res=1 01:36:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) r3 = getpgrp(0xffffffffffffffff) rt_sigqueueinfo(r3, 0x2f, &(0x7f0000000180)={0x5, 0x5, 0x401}) [ 417.685997] sg_write: 1 callbacks suppressed [ 417.686014] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 417.686014] program syz-executor2 not setting count and/or reply_len properly 01:36:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) write$FUSE_STATFS(r10, &(0x7f0000005000)={0x4b, 0x0, 0x1, {{0x0, 0x0, 0x6, 0x6, 0x1, 0x9, 0x80}}}, 0x60) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:40 executing program 1 (fault-call:2 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x541b, 0x0) 01:36:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$sock_ifreq(r2, 0x8931, &(0x7f0000000180)={'veth0_to_team\x00', @ifru_names='ip6tnl0\x00'}) recvfrom$rose(r2, &(0x7f0000000200)=""/166, 0xa6, 0x10100, &(0x7f00000002c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x40) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) getpeername$unix(r2, &(0x7f0000000080), &(0x7f0000000100)=0x6e) write$binfmt_misc(r3, 0x0, 0xfeffff) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000001c0)=r2) 01:36:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400203) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) 01:36:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000300000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 418.226293] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 418.226293] program syz-executor2 not setting count and/or reply_len properly [ 418.246056] FAULT_INJECTION: forcing a failure. [ 418.246056] name failslab, interval 1, probability 0, space 0, times 0 [ 418.257642] CPU: 0 PID: 21291 Comm: syz-executor1 Not tainted 4.20.0 #167 [ 418.264604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.273985] Call Trace: 01:36:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000070000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 418.276611] dump_stack+0x1d3/0x2c6 [ 418.280282] ? dump_stack_print_info.cold.1+0x20/0x20 [ 418.285521] should_fail.cold.4+0xa/0x17 [ 418.289620] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 418.294749] ? kasan_check_read+0x11/0x20 [ 418.298928] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 418.304257] ? print_usage_bug+0xc0/0xc0 [ 418.308371] ? __mutex_lock+0x85e/0x1700 [ 418.312560] ? tun_get_user+0x1db5/0x4250 [ 418.316748] ? mark_held_locks+0x130/0x130 [ 418.321014] ? mutex_trylock+0x2b0/0x2b0 [ 418.325111] ? mark_held_locks+0x130/0x130 [ 418.329380] ? print_usage_bug+0xc0/0xc0 [ 418.333489] ? print_usage_bug+0xc0/0xc0 [ 418.337576] ? up_write+0x7b/0x220 [ 418.341155] ? print_usage_bug+0xc0/0xc0 [ 418.345292] __should_failslab+0x124/0x180 [ 418.349559] should_failslab+0x9/0x14 [ 418.353392] kmem_cache_alloc+0x47/0x730 [ 418.357492] ? __lock_acquire+0x62f/0x4c20 [ 418.361830] __build_skb+0xab/0x430 [ 418.365508] ? skb_try_coalesce+0x1b70/0x1b70 [ 418.370050] ? __alloc_pages_nodemask+0xea0/0xea0 [ 418.374933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.380502] ? check_preemption_disabled+0x48/0x280 [ 418.385554] __napi_alloc_skb+0x1d6/0x310 [ 418.389772] napi_get_frags+0x67/0x140 [ 418.393695] tun_get_user+0x1e1f/0x4250 [ 418.397701] ? __lock_acquire+0x62f/0x4c20 [ 418.401959] ? print_usage_bug+0xc0/0xc0 [ 418.406047] ? rcu_softirq_qs+0x20/0x20 [ 418.407665] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 418.407665] program syz-executor2 not setting count and/or reply_len properly [ 418.410059] ? check_preemption_disabled+0x48/0x280 [ 418.410095] ? tun_net_xmit+0x1c90/0x1c90 [ 418.410111] ? graph_lock+0x270/0x270 [ 418.410127] ? __lock_acquire+0x62f/0x4c20 [ 418.410155] ? graph_lock+0x270/0x270 [ 418.447082] ? find_held_lock+0x36/0x1c0 [ 418.451182] ? tun_get+0x206/0x370 [ 418.454779] ? lock_downgrade+0x900/0x900 [ 418.458953] ? check_preemption_disabled+0x48/0x280 [ 418.464000] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 418.468956] ? kasan_check_read+0x11/0x20 01:36:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x5451, 0x0) [ 418.473135] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 418.478444] ? rcu_softirq_qs+0x20/0x20 [ 418.482472] ? tun_get+0x22d/0x370 [ 418.486041] ? tun_chr_close+0x180/0x180 [ 418.490139] tun_chr_write_iter+0xb9/0x160 [ 418.490169] do_iter_readv_writev+0x8b0/0xa80 [ 418.498972] ? vfs_dedupe_file_range+0x700/0x700 [ 418.498999] ? rw_verify_area+0x118/0x360 [ 418.499021] do_iter_write+0x185/0x5f0 [ 418.499041] ? dup_iter+0x260/0x260 [ 418.515501] ? proc_cwd_link+0x1d0/0x1d0 [ 418.519606] vfs_writev+0x1f1/0x360 [ 418.523274] ? vfs_iter_write+0xb0/0xb0 [ 418.527283] ? wait_for_completion+0x8a0/0x8a0 [ 418.531925] ? __lock_is_held+0xb5/0x140 [ 418.536042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.541613] ? __fdget_pos+0xde/0x200 [ 418.545439] ? __fdget_raw+0x20/0x20 [ 418.549184] ? __sb_end_write+0xd9/0x110 [ 418.553323] do_writev+0x11a/0x310 [ 418.556894] ? vfs_writev+0x360/0x360 [ 418.560726] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 418.566245] __x64_sys_writev+0x75/0xb0 [ 418.570273] do_syscall_64+0x1b9/0x820 01:36:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000290000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x5460, 0x0) [ 418.574219] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 418.579614] ? syscall_return_slowpath+0x5e0/0x5e0 [ 418.584570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.589446] ? trace_hardirqs_on_caller+0x310/0x310 [ 418.594505] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 418.599553] ? prepare_exit_to_usermode+0x291/0x3b0 [ 418.604604] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.609489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.614702] RIP: 0033:0x457611 [ 418.617925] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 418.636857] RSP: 002b:00007fba17a90ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 418.644594] RAX: ffffffffffffffda RBX: 000000000000ff27 RCX: 0000000000457611 [ 418.651896] RDX: 0000000000000001 RSI: 00007fba17a90bf0 RDI: 00000000000000f0 [ 418.659223] RBP: 000000002000a000 R08: 00000000000000f0 R09: 0000000000000000 [ 418.666522] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fba17a916d4 01:36:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x100000001, 0x8002) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x48201, 0x0) bind$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0xffff, @mcast2}}, [0x8, 0x5, 0x8, 0x3, 0xd77, 0x7, 0x8, 0x1, 0x3, 0x0, 0x80000000, 0x3f, 0x7, 0xfffffffffffeffff, 0x100000000]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000640)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000004c0)=0x81) sendto$netrom(r3, &(0x7f0000000400)="c794c223dada619e2369526ace2638313d58d2199c1e558990691a6a26c7e64bf2facd45aa982002bd6c067cd02e93c9d5ef10ff72faec64372ab719df26f07800aa21cd860639bb89fc7e9f3ec6622dfb1d9dddca25d08a9c369672c555fc899c1dfb313228de1742e1e6b056fa76fb7c883ca106165692", 0x78, 0x10, &(0x7f0000000780)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={r6, 0x80000, r5}) connect$vsock_dgram(r5, &(0x7f0000000480)={0x28, 0x0, 0x0, @reserved}, 0x10) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000100)='rose0\x00') r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x210, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) [ 418.673818] R13: 00000000004c5977 R14: 00000000004da5c0 R15: 0000000000000004 01:36:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc0045878, 0x0) [ 418.746855] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 418.746855] program syz-executor2 not setting count and/or reply_len properly [ 418.765741] audit: type=1804 audit(1545701800.864:76): pid=21315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/515/bus" dev="sda1" ino=17598 res=1 01:36:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000090000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:41 executing program 1 (fault-call:2 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x4b49, 0x0) 01:36:41 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0x4}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000280)={0xf7, 0x401, 0x0, 0x5daa817e}) ioprio_get$uid(0x3, r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r3, 0x0, 0xfeffff) [ 419.580727] FAULT_INJECTION: forcing a failure. [ 419.580727] name failslab, interval 1, probability 0, space 0, times 0 [ 419.604881] FAULT_INJECTION: forcing a failure. [ 419.604881] name failslab, interval 1, probability 0, space 0, times 0 [ 419.618957] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 419.618957] program syz-executor2 not setting count and/or reply_len properly [ 419.631827] CPU: 0 PID: 21349 Comm: syz-executor1 Not tainted 4.20.0 #167 [ 419.641729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.651103] Call Trace: [ 419.653719] dump_stack+0x1d3/0x2c6 [ 419.657377] ? dump_stack_print_info.cold.1+0x20/0x20 [ 419.662598] ? lock_downgrade+0x900/0x900 [ 419.666763] ? check_preemption_disabled+0x48/0x280 [ 419.671813] should_fail.cold.4+0xa/0x17 [ 419.675897] ? fault_create_debugfs_attr+0x1f0/0x1f0 01:36:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020048000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 419.681016] ? unwind_dump+0x190/0x190 [ 419.684931] ? is_bpf_text_address+0xd3/0x170 [ 419.689446] ? kernel_text_address+0x79/0xf0 [ 419.693879] ? __kernel_text_address+0xd/0x40 [ 419.698396] ? unwind_get_return_address+0x61/0xa0 [ 419.703351] ? __save_stack_trace+0x8d/0xf0 [ 419.707709] ? save_stack+0xa9/0xd0 [ 419.711359] ? save_stack+0x43/0xd0 [ 419.714998] ? kasan_kmalloc+0xc7/0xe0 [ 419.715016] ? kasan_slab_alloc+0x12/0x20 [ 419.723054] ? kmem_cache_alloc+0x12e/0x730 [ 419.723069] ? __build_skb+0xab/0x430 [ 419.723082] ? __napi_alloc_skb+0x1d6/0x310 [ 419.723098] ? tun_get_user+0x1e1f/0x4250 [ 419.723112] ? tun_chr_write_iter+0xb9/0x160 [ 419.723128] ? do_iter_readv_writev+0x8b0/0xa80 [ 419.723141] ? do_iter_write+0x185/0x5f0 [ 419.723156] ? vfs_writev+0x1f1/0x360 [ 419.723175] ? do_writev+0x11a/0x310 [ 419.760434] ? __x64_sys_writev+0x75/0xb0 [ 419.764616] ? do_syscall_64+0x1b9/0x820 [ 419.768699] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 419.774089] ? tun_get_user+0x1db5/0x4250 01:36:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40086602, 0x0) [ 419.778263] __should_failslab+0x124/0x180 [ 419.782518] should_failslab+0x9/0x14 [ 419.786347] kmem_cache_alloc_node_trace+0x5a/0x740 [ 419.791389] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.796954] __kmalloc_node_track_caller+0x3c/0x70 [ 419.801911] __kmalloc_reserve.isra.39+0x41/0xe0 [ 419.806691] pskb_expand_head+0x230/0x10f0 [ 419.810964] ? rcu_read_lock_sched_held+0x108/0x120 [ 419.816012] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 419.820538] ? mark_held_locks+0xc7/0x130 [ 419.824771] ? __local_bh_enable_ip+0x160/0x260 [ 419.829479] ? __local_bh_enable_ip+0x160/0x260 [ 419.834173] ? lockdep_hardirqs_on+0x421/0x5c0 [ 419.834214] ? trace_hardirqs_on+0xbd/0x310 [ 419.834234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.834250] ? tun_get_user+0x1e38/0x4250 [ 419.834267] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 419.834283] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 419.834300] ? check_preemption_disabled+0x48/0x280 [ 419.834321] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 419.843506] ? tun_get_user+0x1df6/0x4250 [ 419.843521] ? tun_get_user+0x1df6/0x4250 [ 419.843541] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 419.843562] tun_get_user+0x2943/0x4250 [ 419.843578] ? __lock_acquire+0x62f/0x4c20 [ 419.843593] ? print_usage_bug+0xc0/0xc0 [ 419.843608] ? rcu_softirq_qs+0x20/0x20 [ 419.843627] ? check_preemption_disabled+0x48/0x280 [ 419.843657] ? tun_net_xmit+0x1c90/0x1c90 [ 419.843669] ? graph_lock+0x270/0x270 [ 419.843685] ? __lock_acquire+0x62f/0x4c20 [ 419.843708] ? graph_lock+0x270/0x270 [ 419.926310] ? find_held_lock+0x36/0x1c0 [ 419.930396] ? tun_get+0x206/0x370 [ 419.933960] ? lock_downgrade+0x900/0x900 [ 419.938133] ? check_preemption_disabled+0x48/0x280 [ 419.943179] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 419.948156] ? kasan_check_read+0x11/0x20 [ 419.952344] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 419.957640] ? rcu_softirq_qs+0x20/0x20 [ 419.961646] ? tun_get+0x22d/0x370 [ 419.965230] ? tun_chr_close+0x180/0x180 [ 419.969325] tun_chr_write_iter+0xb9/0x160 [ 419.973586] do_iter_readv_writev+0x8b0/0xa80 01:36:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCSCTTY(r1, 0x540e, 0x7ff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x3, r1, 0x1}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r2, 0x0, 0xfeffff) [ 419.978105] ? vfs_dedupe_file_range+0x700/0x700 [ 419.982887] ? rw_verify_area+0x118/0x360 [ 419.987059] do_iter_write+0x185/0x5f0 [ 419.990968] ? dup_iter+0x260/0x260 [ 419.994618] ? proc_cwd_link+0x1d0/0x1d0 [ 419.998718] vfs_writev+0x1f1/0x360 [ 420.002372] ? vfs_iter_write+0xb0/0xb0 [ 420.006371] ? wait_for_completion+0x8a0/0x8a0 [ 420.010985] ? __lock_is_held+0xb5/0x140 [ 420.015083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.020653] ? __fdget_pos+0xde/0x200 [ 420.024483] ? __fdget_raw+0x20/0x20 [ 420.024500] ? __sb_end_write+0xd9/0x110 [ 420.024525] do_writev+0x11a/0x310 [ 420.032334] ? vfs_writev+0x360/0x360 [ 420.032356] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 420.032375] __x64_sys_writev+0x75/0xb0 [ 420.032395] do_syscall_64+0x1b9/0x820 [ 420.032416] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 420.058478] ? syscall_return_slowpath+0x5e0/0x5e0 [ 420.063432] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.068375] ? trace_hardirqs_on_caller+0x310/0x310 [ 420.073416] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 420.078456] ? prepare_exit_to_usermode+0x291/0x3b0 [ 420.083514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.088384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.093592] RIP: 0033:0x457611 [ 420.096808] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 420.115729] RSP: 002b:00007fba17a90ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 420.123460] RAX: ffffffffffffffda RBX: 000000000000ff27 RCX: 0000000000457611 [ 420.130755] RDX: 0000000000000001 RSI: 00007fba17a90bf0 RDI: 00000000000000f0 [ 420.138036] RBP: 000000002000a000 R08: 00000000000000f0 R09: 0000000000000000 [ 420.145328] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fba17a916d4 [ 420.152612] R13: 00000000004c5977 R14: 00000000004da5c0 R15: 0000000000000004 [ 420.159924] CPU: 1 PID: 21350 Comm: syz-executor4 Not tainted 4.20.0 #167 [ 420.166888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.176265] Call Trace: [ 420.178876] dump_stack+0x1d3/0x2c6 [ 420.182540] ? dump_stack_print_info.cold.1+0x20/0x20 [ 420.187762] should_fail.cold.4+0xa/0x17 [ 420.191851] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 420.196988] ? lock_downgrade+0x900/0x900 [ 420.201161] ? check_preemption_disabled+0x48/0x280 [ 420.206242] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 420.211213] ? kasan_check_read+0x11/0x20 [ 420.215451] ? __netlink_insert+0xd2c/0x13b0 [ 420.219885] ? __netlink_insert+0xd2c/0x13b0 [ 420.224322] ? find_held_lock+0x36/0x1c0 [ 420.228421] ? ___might_sleep+0x1ed/0x300 [ 420.232592] ? arch_local_save_flags+0x40/0x40 [ 420.237233] __should_failslab+0x124/0x180 [ 420.241496] should_failslab+0x9/0x14 [ 420.245322] kmem_cache_alloc_node+0x26e/0x730 [ 420.249923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.255483] ? check_preemption_disabled+0x48/0x280 [ 420.260529] __alloc_skb+0x119/0x770 [ 420.264278] ? skb_scrub_packet+0x490/0x490 [ 420.268621] ? __release_sock+0x3a0/0x3a0 [ 420.272798] ? __local_bh_enable_ip+0x160/0x260 [ 420.277498] ? netlink_insert+0xfe/0x240 [ 420.281590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.287146] ? netlink_autobind.isra.34+0x232/0x310 [ 420.292209] netlink_sendmsg+0xb29/0xfc0 [ 420.296303] ? netlink_unicast+0x760/0x760 [ 420.300572] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.306132] ? security_socket_sendmsg+0x94/0xc0 [ 420.310908] ? netlink_unicast+0x760/0x760 [ 420.315243] sock_sendmsg+0xd5/0x120 [ 420.318994] ___sys_sendmsg+0x7fd/0x930 [ 420.323006] ? copy_msghdr_from_user+0x580/0x580 [ 420.327787] ? lock_downgrade+0x900/0x900 [ 420.331958] ? proc_fail_nth_write+0x9e/0x210 [ 420.336493] ? __fget_light+0x2e9/0x430 [ 420.340494] ? fget_raw+0x20/0x20 [ 420.341026] FAULT_INJECTION: forcing a failure. [ 420.341026] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.343980] ? find_held_lock+0x36/0x1c0 [ 420.359854] ? kasan_check_write+0x14/0x20 [ 420.364107] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 420.369058] ? wait_for_completion+0x8a0/0x8a0 [ 420.373667] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 420.379248] ? sockfd_lookup_light+0xc5/0x160 [ 420.383767] __sys_sendmsg+0x11d/0x280 [ 420.387674] ? __ia32_sys_shutdown+0x80/0x80 [ 420.392095] ? __sb_end_write+0xd9/0x110 [ 420.396173] ? fput+0x130/0x1a0 [ 420.399486] ? do_syscall_64+0x9a/0x820 [ 420.403472] ? do_syscall_64+0x9a/0x820 [ 420.407474] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 420.412949] __x64_sys_sendmsg+0x78/0xb0 [ 420.417038] do_syscall_64+0x1b9/0x820 [ 420.420938] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 420.426327] ? syscall_return_slowpath+0x5e0/0x5e0 [ 420.431273] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.436136] ? trace_hardirqs_on_caller+0x310/0x310 [ 420.441171] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 420.446245] ? prepare_exit_to_usermode+0x291/0x3b0 [ 420.451284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.456147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.461349] RIP: 0033:0x457759 [ 420.464559] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:36:42 executing program 1 (fault-call:2 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:42 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x200000200005, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x400000, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r1, 0x0, 0xfffffffffffffe7f) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x6) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x806}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r3, 0x20, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044851}, 0x0) [ 420.483484] RSP: 002b:00007f458f925c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.491233] RAX: ffffffffffffffda RBX: 00007f458f925c90 RCX: 0000000000457759 [ 420.498517] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 420.505803] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 420.513086] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f458f9266d4 [ 420.520368] R13: 00000000004c49c9 R14: 00000000004d80a0 R15: 0000000000000005 [ 420.527683] CPU: 0 PID: 21379 Comm: syz-executor1 Not tainted 4.20.0 #167 [ 420.534634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.544001] Call Trace: [ 420.546611] dump_stack+0x1d3/0x2c6 [ 420.550265] ? dump_stack_print_info.cold.1+0x20/0x20 [ 420.555488] ? lock_downgrade+0x900/0x900 [ 420.559660] should_fail.cold.4+0xa/0x17 [ 420.563750] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 420.568880] ? mark_held_locks+0x130/0x130 [ 420.573141] ? graph_lock+0x270/0x270 [ 420.576962] ? print_usage_bug+0xc0/0xc0 01:36:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x80087601, 0x0) [ 420.581041] ? is_bpf_text_address+0xd3/0x170 [ 420.585568] ? find_held_lock+0x36/0x1c0 [ 420.589654] ? is_bpf_text_address+0xac/0x170 [ 420.593814] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 420.593814] program syz-executor2 not setting count and/or reply_len properly [ 420.594179] ? check_preemption_disabled+0x48/0x280 [ 420.615032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.620595] ? should_fail+0x22d/0xd01 [ 420.624500] ? rcu_softirq_qs+0x20/0x20 [ 420.624515] ? fault_create_debugfs_attr+0x1f0/0x1f0 01:36:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 420.624528] ? unwind_dump+0x190/0x190 [ 420.624550] __alloc_pages_nodemask+0x366/0xea0 [ 420.624565] ? is_bpf_text_address+0xd3/0x170 [ 420.624585] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 420.624600] ? unwind_get_return_address+0x61/0xa0 [ 420.624621] ? __save_stack_trace+0x8d/0xf0 [ 420.661034] ? save_stack+0xa9/0xd0 [ 420.664685] ? save_stack+0x43/0xd0 [ 420.668330] ? kasan_kmalloc+0xc7/0xe0 [ 420.668345] ? kasan_slab_alloc+0x12/0x20 [ 420.668362] ? kmem_cache_alloc+0x12e/0x730 [ 420.668382] ? __build_skb+0xab/0x430 [ 420.680750] ? __napi_alloc_skb+0x1d6/0x310 [ 420.688876] ? napi_get_frags+0x67/0x140 [ 420.692955] ? tun_get_user+0x1e1f/0x4250 [ 420.697132] ? trace_hardirqs_off+0xb8/0x310 [ 420.701562] cache_grow_begin+0x91/0x8c0 [ 420.705645] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 420.711433] ? check_preemption_disabled+0x48/0x280 [ 420.716494] kmem_cache_alloc_node_trace+0x670/0x740 [ 420.721632] __kmalloc_node_track_caller+0x3c/0x70 [ 420.726591] __kmalloc_reserve.isra.39+0x41/0xe0 [ 420.731383] pskb_expand_head+0x230/0x10f0 01:36:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020004000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 420.735654] ? rcu_read_lock_sched_held+0x108/0x120 [ 420.740711] ? __pskb_copy_fclone+0xeb0/0xeb0 [ 420.740735] ? mark_held_locks+0xc7/0x130 [ 420.740754] ? __local_bh_enable_ip+0x160/0x260 [ 420.740772] ? __local_bh_enable_ip+0x160/0x260 [ 420.740790] ? lockdep_hardirqs_on+0x421/0x5c0 [ 420.763541] ? trace_hardirqs_on+0xbd/0x310 [ 420.767886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.767904] ? tun_get_user+0x1e38/0x4250 [ 420.767925] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 420.777634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.788620] ? check_preemption_disabled+0x48/0x280 [ 420.788640] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 420.788658] ? tun_get_user+0x1df6/0x4250 [ 420.788676] ? tun_get_user+0x1df6/0x4250 [ 420.807550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 420.813113] tun_get_user+0x2943/0x4250 [ 420.817116] ? __lock_acquire+0x62f/0x4c20 [ 420.821369] ? print_usage_bug+0xc0/0xc0 [ 420.825444] ? rcu_softirq_qs+0x20/0x20 [ 420.825474] ? check_preemption_disabled+0x48/0x280 [ 420.825510] ? tun_net_xmit+0x1c90/0x1c90 [ 420.825525] ? graph_lock+0x270/0x270 [ 420.825546] ? __lock_acquire+0x62f/0x4c20 [ 420.834560] ? graph_lock+0x270/0x270 [ 420.834583] ? find_held_lock+0x36/0x1c0 [ 420.834609] ? tun_get+0x206/0x370 [ 420.834627] ? lock_downgrade+0x900/0x900 [ 420.834642] ? check_preemption_disabled+0x48/0x280 [ 420.834661] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 420.834675] ? kasan_check_read+0x11/0x20 [ 420.834690] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 420.834705] ? rcu_softirq_qs+0x20/0x20 [ 420.834731] ? tun_get+0x22d/0x370 [ 420.850752] ? tun_chr_close+0x180/0x180 [ 420.867532] tun_chr_write_iter+0xb9/0x160 [ 420.867558] do_iter_readv_writev+0x8b0/0xa80 [ 420.867582] ? vfs_dedupe_file_range+0x700/0x700 [ 420.867608] ? rw_verify_area+0x118/0x360 [ 420.867629] do_iter_write+0x185/0x5f0 [ 420.867648] ? dup_iter+0x260/0x260 [ 420.867661] ? proc_cwd_link+0x1d0/0x1d0 [ 420.867682] vfs_writev+0x1f1/0x360 [ 420.867700] ? vfs_iter_write+0xb0/0xb0 [ 420.867722] ? wait_for_completion+0x8a0/0x8a0 [ 420.889796] ? __lock_is_held+0xb5/0x140 [ 420.889826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 420.915627] ? __fdget_pos+0xde/0x200 [ 420.915647] ? __fdget_raw+0x20/0x20 [ 420.915665] ? __sb_end_write+0xd9/0x110 [ 420.915693] do_writev+0x11a/0x310 [ 420.915722] ? vfs_writev+0x360/0x360 [ 420.945218] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 420.945243] __x64_sys_writev+0x75/0xb0 [ 420.945264] do_syscall_64+0x1b9/0x820 [ 420.945281] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 01:36:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x14000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, r1}) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000600)=@known='trusted.overlay.upper\x00', &(0x7f0000000640)='/dev/ptmx\x00', 0xa, 0x1) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000680)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r3, r4, 0x200}) write$binfmt_misc(r2, 0x0, 0xfeffff) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/175, 0xaf) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x4000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000580)=ANY=[@ANYBLOB="040000000000000000d00000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYBLOB="00001000c600000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000210010000000000e000000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00F\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000001000/0x1000)=nil) [ 420.945302] ? syscall_return_slowpath+0x5e0/0x5e0 [ 420.960446] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.960478] ? trace_hardirqs_on_caller+0x310/0x310 [ 420.960497] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 420.960516] ? prepare_exit_to_usermode+0x291/0x3b0 [ 420.960537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.960561] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 420.973949] RIP: 0033:0x457611 [ 420.983227] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 420.983237] RSP: 002b:00007fba17a90ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 420.983253] RAX: ffffffffffffffda RBX: 000000000000ff27 RCX: 0000000000457611 [ 420.983263] RDX: 0000000000000001 RSI: 00007fba17a90bf0 RDI: 00000000000000f0 [ 420.983273] RBP: 000000002000a000 R08: 00000000000000f0 R09: 0000000000000000 [ 420.983283] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fba17a916d4 [ 420.983293] R13: 00000000004c5977 R14: 00000000004da5c0 R15: 0000000000000004 01:36:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc020660b, 0x0) 01:36:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020029000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 420.992275] audit: type=1804 audit(1545701803.064:77): pid=21396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/517/bus" dev="sda1" ino=17621 res=1 [ 421.033883] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 421.033883] program syz-executor2 not setting count and/or reply_len properly 01:36:43 executing program 1 (fault-call:2 fault-nth:3): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x7400000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 421.256572] FAULT_INJECTION: forcing a failure. [ 421.256572] name failslab, interval 1, probability 0, space 0, times 0 [ 421.268131] CPU: 0 PID: 21410 Comm: syz-executor1 Not tainted 4.20.0 #167 [ 421.275082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.284456] Call Trace: [ 421.287080] dump_stack+0x1d3/0x2c6 [ 421.290736] ? dump_stack_print_info.cold.1+0x20/0x20 [ 421.295971] should_fail.cold.4+0xa/0x17 [ 421.300058] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 421.305186] ? print_usage_bug+0xc0/0xc0 [ 421.309293] ? print_usage_bug+0xc0/0xc0 [ 421.313380] ? graph_lock+0x270/0x270 [ 421.317227] ? print_usage_bug+0xc0/0xc0 [ 421.321313] ? mark_held_locks+0x130/0x130 [ 421.325660] ? __lock_acquire+0x62f/0x4c20 [ 421.329919] ? find_held_lock+0x36/0x1c0 [ 421.334004] ? graph_lock+0x270/0x270 [ 421.337837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.343404] ? check_preemption_disabled+0x48/0x280 [ 421.348450] ? __lock_is_held+0xb5/0x140 [ 421.352550] __should_failslab+0x124/0x180 [ 421.356809] should_failslab+0x9/0x14 [ 421.360640] kmem_cache_alloc+0x47/0x730 [ 421.364799] ? inet_netconf_dump_devconf+0x1110/0x1110 [ 421.370129] dst_alloc+0xbb/0x1d0 [ 421.370215] rt_dst_alloc+0x105/0x540 [ 421.370236] ? fnhe_flush_routes+0x480/0x480 [ 421.381980] ? fib_validate_source+0x34d/0x600 [ 421.386600] ? ip_mc_validate_source+0x262/0x2c0 [ 421.386617] ? ip_mc_validate_source+0x122/0x2c0 [ 421.386640] ip_route_input_rcu+0x51f/0xd80 [ 421.386666] ? ip_route_input_slow+0x3ea0/0x3ea0 [ 421.396187] ? lock_acquire+0x1ed/0x520 [ 421.396227] ? ip_route_input_rcu+0xd80/0xd80 [ 421.396247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.396264] ? check_preemption_disabled+0x48/0x280 [ 421.396283] ? kasan_check_read+0x11/0x20 [ 421.405369] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.405387] ? rcu_softirq_qs+0x20/0x20 [ 421.405411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.405434] ip_route_input_noref+0x11d/0x260 [ 421.405453] ? ip_route_input_rcu+0xd80/0xd80 [ 421.419485] ? __lock_is_held+0xb5/0x140 [ 421.433930] ip_rcv_finish_core.isra.16+0x5b5/0x1f40 [ 421.433956] ? ip_local_deliver_finish+0xda0/0xda0 [ 421.433977] ? find_held_lock+0x36/0x1c0 [ 421.434002] ? ip_rcv+0x3ee/0x600 [ 421.434022] ? lock_downgrade+0x900/0x900 [ 421.443535] ? check_preemption_disabled+0x48/0x280 [ 421.443558] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 421.443573] ? kasan_check_read+0x11/0x20 [ 421.443589] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.443606] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 421.443619] ? rcu_softirq_qs+0x20/0x20 [ 421.443641] ip_rcv_finish+0xc6/0x300 [ 421.443660] ip_rcv+0xed/0x600 [ 421.443680] ? ip_local_deliver+0x750/0x750 [ 421.452699] ? pvclock_read_flags+0x160/0x160 [ 421.470858] ? ip_rcv_finish_core.isra.16+0x1f40/0x1f40 [ 421.470886] ? lock_acquire+0x1ed/0x520 [ 421.470911] __netif_receive_skb_one_core+0x14d/0x200 [ 421.470929] ? __netif_receive_skb_core+0x3b30/0x3b30 [ 421.470949] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.477348] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; 01:36:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f00000002c0)=0x1f) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) clone(0x2200, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000980)=""/4096) mknod(0x0, 0x1041, 0x0) r5 = open(&(0x7f0000000280)='./file1\x00', 0x0, 0x44) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000900)=0x7, &(0x7f0000000940)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000000c0)={r2, r5}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[]}}, 0x0) poll(&(0x7f0000000140)=[{r2, 0x1081}, {r3, 0x6}, {r5, 0x4004}, {r4, 0x80}], 0x4, 0x2) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/53, 0x35) sendmmsg(0xffffffffffffffff, &(0x7f0000005280), 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz'}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000180)={@loopback}, 0xffffffffffffffc1) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f00000001c0)={0x0, 0x4}) socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="e4329b02ab1e9c3d460e692a2f725ea82b1ff0ed43251ba341599d590f4c5e49a5acf1888a1ffa1733000000673864f1c60c09f7ae4aba567632d228d4caaba8a7bd8ea0321c679b616c2338a1e162276c784e786b234699fb36b9e1db768eeedd020be563dc69fc3a8175e69c03803ca16bf8ee853c060ade7c10adf93c0486c9ee6f4b1f560cabb1ad925fe282b27d253aac5a9439b47c716cc6715074643c04438237100bc91577e9c82a8f1b3099c471f318ef67fbff58baadf74c2db099000000000000000000"], 0x1, 0x0) write$binfmt_elf32(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="b0ae87b3dcf43e32a5fcd74af7fbdbaf19b5b2734886ee630ec7db650ca6bee5f60d5e74745966c907e9d659c2a7e690af"], 0x31) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r2, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f00000004c0)=0x100000035) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9e5b) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r6, 0x4}}, 0x10) 01:36:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x4b47, 0x0) [ 421.477348] program syz-executor2 not setting count and/or reply_len properly [ 421.478570] ? rcu_softirq_qs+0x20/0x20 [ 421.497939] __netif_receive_skb+0x2c/0x1e0 [ 421.537260] netif_receive_skb_internal+0x12c/0x620 [ 421.537281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.537296] ? dev_cpu_dead+0xa80/0xa80 [ 421.537318] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 421.563740] ? eth_type_trans+0x2ea/0x760 [ 421.563760] ? eth_gro_receive+0x920/0x920 [ 421.563786] napi_gro_frags+0x75a/0xc90 01:36:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000006003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 421.563806] ? napi_gro_receive+0x5f0/0x5f0 [ 421.563819] ? eth_get_headlen+0x12f/0x1f0 [ 421.563832] ? eth_get_headlen+0x173/0x1f0 [ 421.563848] ? eth_type_trans+0x760/0x760 [ 421.563868] ? tun_get_user+0x3160/0x4250 [ 421.563887] tun_get_user+0x3189/0x4250 [ 421.608949] ? __lock_acquire+0x62f/0x4c20 [ 421.608973] ? print_usage_bug+0xc0/0xc0 [ 421.608989] ? rcu_softirq_qs+0x20/0x20 [ 421.609010] ? check_preemption_disabled+0x48/0x280 [ 421.609040] ? tun_net_xmit+0x1c90/0x1c90 [ 421.647041] ? graph_lock+0x270/0x270 [ 421.647060] ? __lock_acquire+0x62f/0x4c20 [ 421.647086] ? graph_lock+0x270/0x270 [ 421.647108] ? find_held_lock+0x36/0x1c0 [ 421.659316] ? tun_get+0x206/0x370 [ 421.659337] ? lock_downgrade+0x900/0x900 [ 421.659354] ? check_preemption_disabled+0x48/0x280 [ 421.659378] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 421.667270] ? kasan_check_read+0x11/0x20 [ 421.689043] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 421.694341] ? rcu_softirq_qs+0x20/0x20 [ 421.698348] ? tun_get+0x22d/0x370 [ 421.701905] ? tun_chr_close+0x180/0x180 [ 421.701934] tun_chr_write_iter+0xb9/0x160 [ 421.701957] do_iter_readv_writev+0x8b0/0xa80 [ 421.701980] ? vfs_dedupe_file_range+0x700/0x700 [ 421.702002] ? rw_verify_area+0x118/0x360 [ 421.702022] do_iter_write+0x185/0x5f0 [ 421.702037] ? dup_iter+0x260/0x260 [ 421.702051] ? proc_cwd_link+0x1d0/0x1d0 [ 421.702076] vfs_writev+0x1f1/0x360 [ 421.727662] ? vfs_iter_write+0xb0/0xb0 [ 421.727687] ? wait_for_completion+0x8a0/0x8a0 [ 421.727711] ? __lock_is_held+0xb5/0x140 [ 421.727740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 421.727761] ? __fdget_pos+0xde/0x200 [ 421.739097] ? __fdget_raw+0x20/0x20 [ 421.739116] ? __sb_end_write+0xd9/0x110 [ 421.739144] do_writev+0x11a/0x310 [ 421.739165] ? vfs_writev+0x360/0x360 [ 421.739188] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 421.781803] __x64_sys_writev+0x75/0xb0 [ 421.785806] do_syscall_64+0x1b9/0x820 [ 421.789712] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 421.795101] ? syscall_return_slowpath+0x5e0/0x5e0 [ 421.800051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.804918] ? trace_hardirqs_on_caller+0x310/0x310 [ 421.809957] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 421.814994] ? prepare_exit_to_usermode+0x291/0x3b0 [ 421.820040] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 421.825020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 421.830400] RIP: 0033:0x457611 [ 421.833716] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b5 fb ff c3 48 83 ec 08 e8 1a 2d 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 63 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 421.852920] RSP: 002b:00007fba17a90ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 421.860649] RAX: ffffffffffffffda RBX: 000000000000ff27 RCX: 0000000000457611 [ 421.867933] RDX: 0000000000000001 RSI: 00007fba17a90bf0 RDI: 00000000000000f0 [ 421.875240] RBP: 000000002000a000 R08: 00000000000000f0 R09: 0000000000000000 [ 421.882523] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fba17a916d4 [ 421.889807] R13: 00000000004c5977 R14: 00000000004da5c0 R15: 0000000000000004 [ 421.900978] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 421.900978] program syz-executor2 not setting count and/or reply_len properly 01:36:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x2, 0x0) 01:36:44 executing program 1 (fault-call:2 fault-nth:4): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000030000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 422.225506] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 422.225506] program syz-executor2 not setting count and/or reply_len properly [ 422.232441] audit: type=1400 audit(1545701804.314:78): avc: denied { map } for pid=21423 comm="syz-executor0" path="/dev/dsp" dev="devtmpfs" ino=16042 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 01:36:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc0045878, 0x0) [ 422.442906] audit: type=1804 audit(1545701804.544:79): pid=21457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/518/bus" dev="sda1" ino=17621 res=1 01:36:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02006c000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xfffffdef, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)={0x0, @aes128, 0x2, "51b7dc9da334c7cf"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r0, 0x0, 0x0) 01:36:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40087602, 0x0) 01:36:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000074003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 422.935847] sg_write: 1 callbacks suppressed [ 422.935862] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 422.935862] program syz-executor2 not setting count and/or reply_len properly 01:36:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 01:36:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x39d3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffffffffffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff9}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000000c0)=""/246) ioctl$EVIOCGREP(r4, 0x80047456, &(0x7f0000d1df52)=""/174) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_misc(r5, 0x0, 0xfeffff) 01:36:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xfdef, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0xc0189436, 0x0) 01:36:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000008000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x5450, 0x0) [ 423.239475] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 423.239475] program syz-executor2 not setting count and/or reply_len properly 01:36:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000480000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 423.363088] audit: type=1804 audit(1545701805.464:80): pid=21519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/519/bus" dev="sda1" ino=17610 res=1 01:36:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0x140, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x5452, 0x0) 01:36:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f00000002c0)=0x1f) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) clone(0x2200, 0x0, 0x0, 0x0, &(0x7f0000000440)) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000980)=""/4096) mknod(0x0, 0x1041, 0x0) r5 = open(&(0x7f0000000280)='./file1\x00', 0x0, 0x44) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000900)=0x7, &(0x7f0000000940)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000000c0)={r2, r5}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[]}}, 0x0) poll(&(0x7f0000000140)=[{r2, 0x1081}, {r3, 0x6}, {r5, 0x4004}, {r4, 0x80}], 0x4, 0x2) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/53, 0x35) sendmmsg(0xffffffffffffffff, &(0x7f0000005280), 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz'}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000180)={@loopback}, 0xffffffffffffffc1) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000500)=""/246) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f00000001c0)={0x0, 0x4}) socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="e4329b02ab1e9c3d460e692a2f725ea82b1ff0ed43251ba341599d590f4c5e49a5acf1888a1ffa1733000000673864f1c60c09f7ae4aba567632d228d4caaba8a7bd8ea0321c679b616c2338a1e162276c784e786b234699fb36b9e1db768eeedd020be563dc69fc3a8175e69c03803ca16bf8ee853c060ade7c10adf93c0486c9ee6f4b1f560cabb1ad925fe282b27d253aac5a9439b47c716cc6715074643c04438237100bc91577e9c82a8f1b3099c471f318ef67fbff58baadf74c2db099000000000000000000"], 0x1, 0x0) write$binfmt_elf32(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="b0ae87b3dcf43e32a5fcd74af7fbdbaf19b5b2734886ee630ec7db650ca6bee5f60d5e74745966c907e9d659c2a7e690af"], 0x31) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r2, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f00000004c0)=0x100000035) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9e5b) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r6, 0x4}}, 0x10) [ 423.540805] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 423.540805] program syz-executor2 not setting count and/or reply_len properly 01:36:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 01:36:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xd, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000cfa0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40049409, 0x0) 01:36:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:46 executing program 0 (fault-call:5 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0x20019f27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 424.150334] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 424.150334] program syz-executor2 not setting count and/or reply_len properly 01:36:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x4800, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 424.239363] FAULT_INJECTION: forcing a failure. [ 424.239363] name failslab, interval 1, probability 0, space 0, times 0 01:36:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020006000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 424.287390] audit: type=1804 audit(1545701806.384:81): pid=21571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/520/bus" dev="sda1" ino=17586 res=1 [ 424.323581] CPU: 0 PID: 21567 Comm: syz-executor0 Not tainted 4.20.0 #167 01:36:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0x7ffff000, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x60801, 0x0) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x5) connect(r0, &(0x7f0000000080)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x80) dup(r1) [ 424.330553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.339918] Call Trace: [ 424.342528] dump_stack+0x1d3/0x2c6 [ 424.346186] ? dump_stack_print_info.cold.1+0x20/0x20 [ 424.351426] should_fail.cold.4+0xa/0x17 [ 424.355523] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 424.360661] ? mark_held_locks+0x130/0x130 [ 424.364926] ? graph_lock+0x270/0x270 [ 424.368770] ? rcu_softirq_qs+0x20/0x20 [ 424.372761] ? dput.part.25+0x241/0x790 [ 424.376750] ? lock_downgrade+0x900/0x900 [ 424.380918] ? check_preemption_disabled+0x48/0x280 [ 424.385954] ? find_held_lock+0x36/0x1c0 [ 424.390049] ? ___might_sleep+0x1ed/0x300 [ 424.394223] ? arch_local_save_flags+0x40/0x40 [ 424.398817] ? lockdep_hardirqs_on+0x421/0x5c0 [ 424.403427] ? sg_get_rq_mark+0x16f/0x1e0 [ 424.407597] __should_failslab+0x124/0x180 [ 424.411869] should_failslab+0x9/0x14 [ 424.415680] kmem_cache_alloc_trace+0x2d7/0x750 [ 424.420378] ? _raw_write_unlock_irqrestore+0x6d/0xd0 [ 424.425608] ? sg_get_rq_mark+0x18a/0x1e0 [ 424.429766] sg_read+0xf7a/0x1b60 [ 424.433236] ? lock_downgrade+0x900/0x900 [ 424.437398] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.442976] ? fsnotify+0x50e/0xef0 [ 424.443651] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 424.443651] program syz-executor2 not setting count and/or reply_len properly [ 424.446616] ? sg_new_read+0x430/0x430 [ 424.446633] ? usercopy_warn+0x110/0x110 [ 424.446655] ? fsnotify_first_mark+0x350/0x350 [ 424.446671] ? __fsnotify_parent+0xcc/0x430 [ 424.446696] ? __might_sleep+0x95/0x190 [ 424.479292] ? fsnotify+0xef0/0xef0 [ 424.486879] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 424.491917] ? selinux_file_permission+0x90/0x540 [ 424.496780] ? security_file_permission+0x1c2/0x230 [ 424.496810] do_iter_read+0x4a3/0x650 [ 424.496851] vfs_readv+0x175/0x1c0 [ 424.496871] ? compat_rw_copy_check_uvector+0x440/0x440 [ 424.514589] ? wait_for_completion+0x8a0/0x8a0 [ 424.514614] ? __lock_is_held+0xb5/0x140 [ 424.514642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.514659] ? __fdget_pos+0xde/0x200 [ 424.514677] ? __fdget_raw+0x20/0x20 [ 424.514693] ? __sb_end_write+0xd9/0x110 [ 424.514714] do_readv+0x11a/0x310 [ 424.532676] ? vfs_readv+0x1c0/0x1c0 [ 424.532700] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 424.532722] __x64_sys_readv+0x75/0xb0 [ 424.532742] do_syscall_64+0x1b9/0x820 [ 424.532762] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 424.532780] ? syscall_return_slowpath+0x5e0/0x5e0 [ 424.532795] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.532814] ? trace_hardirqs_on_caller+0x310/0x310 [ 424.532834] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 424.557064] ? prepare_exit_to_usermode+0x291/0x3b0 [ 424.571235] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 424.581077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 424.581098] RIP: 0033:0x457759 [ 424.581114] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 424.581128] RSP: 002b:00007f7790ce1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 424.595963] RAX: ffffffffffffffda RBX: 00007f7790ce1c90 RCX: 0000000000457759 [ 424.595973] RDX: 0000000000000001 RSI: 0000000020000380 RDI: 0000000000000003 [ 424.595982] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 424.595992] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7790ce26d4 [ 424.596002] R13: 00000000004c3f11 R14: 00000000004d72d8 R15: 0000000000000007 01:36:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0xfffffffffffffff9) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 01:36:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000020003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xfffffffffffffdef, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:47 executing program 0 (fault-call:5 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:47 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003580)='/dev/autofs\x00', 0x24000, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000035c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003600)=0x14) bind$packet(r0, &(0x7f0000003640)={0x11, 0x11, r1, 0x1, 0x9, 0x6, @local}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0x1) sendmsg$nfc_llcp(r2, &(0x7f0000003540)={&(0x7f0000000100)={0x27, 0x1, 0x2, 0x7, 0x80000000, 0x6, "0ee8f8c1a4dc0b7530ce712165a237b7114560a4f3eb8d2a172953dbae6bfb33209351b2c4e3e8d3c049e2b3748fc8ab66d73e64646d6390420d73b5c576a1", 0x13}, 0x60, &(0x7f0000003440)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="e62ad571ae47ec6c898fe70c73e50e0c8501e2b58c524cebb18e6bcc6d16e7c29cbfc6592359d822ff521db591cfcf221fc7338b97b775a81893b6a30c057177f78744a0cdd6a3110261edd1ed64748c00b1b7421a7ff113efddeb38bb157fe0e32becccc95a26993f584cef716eacd6016460b3de851e01633b42a53e4e26e4bb43ea87ca3ae82b291596b47245199f1228670487feab926a4880081223859b9681a9062d6b798714d9921380d91290f3142a7f94bf0b551cd1539633aa5e43eec0ec8add08c02acd248fe88eff535f583e3df26b5892b91ec3b3408e4354ecaf92bb7528eab0a846aa0dd4fdaa65df95b508b9fb4e2ac71d75e6f338554b3e1151bb456a0d3a51583f69938eea3baca8e5eab11a9a64dc19c78ffa68d697f518c5f90b3b4008efa9d7b8dbf8d94f8389617525cc1a421bfca15bbb4b824b3ccabfe9efde76d17d41e22952f9af4731389cc9f98ca2bb9307585cf4218ba7a187bdc26faf6914f0b014e32570549e5ae1007948880abc926e9c8f21d411502c25616828bb640173b355e70dda75f21a070710991022837fd0976d44033bc9a1405e86e43fd6b447f6e5e767251b3ffa8031171c89a4d7c3ed89f765cb57a1e3fe54b30c6f80cc360b51e5ff1a3f96494bf29a28d5e9afd7f7805973516b83e7fb033ec4337a84c1183cc714a365206592c0b8693e0e11036dc86409ab41659661f33d0fa7697d6a37e808035599b011b70f58525673230968f5e130946f42e3a5a9da0af472026b16a2ddff461cd357a4713d747c26f4573a38da601c9c97796cede7c8b87a50646697d778a1f97654ad16da9d0eee6bc506999de55637ad2e5c0e0d7840780f4423ef64d0da2f972ca36a724ec1fc54c57f1be1503c58173b1aa8599ca1602cbce58c5220f1a33470f459ec00df300c19076af8f3134cece9a14ba7de70b43386e1bd695ba877c8ca52f7a1a16330e9a325e21ea27ca5fc23256cfee176af3d171b3a7969d3772ea3485f0791918d812f724ef6244e4024518d357a6463be14d8ec8e35ccb96a0a950f6207c6c2df0cee0a9944da372901b7e73cc7e5d4b79626dd00dbe5e3bed259aa8b73d1ceb3be993c8a7f3baeb3dd9fd2a39a355b179df12ef7de6f30e7ce9a21e39b4563872b202ecae26b439b0982ea5fe6665f2dce3a02470cd70b827c2d2f75a6e317e3416eda4c8a10ceec3887a5695c44ab4940c305702c2cd091e4561346bf2812a554290bb2e9cda77125aff29c75ae8ecaecfe9d37f7d92a8bdba19c90cd25b7e47b285d41479ea23ce0ff2fdd48ca77b0ae4dfc31bdf2a35a7e25866b4534812b473adf3db18ae64f194f881566500a78219ab708088ef71bffdd239fb486eb3242acb4ab5c4e7a24a45304b087c2f593013584595cd199405b2c589dcf8a87e73de5705ad23807820c4af49646479c772602d4f1016af5772381e9fe58508aac7b84b0d465a73c85a1d0ad5d98e3529be9caea218a9a7b44fd28926ccb6f1f0aef9572876a2fdab3cec99e60a7cfbfe748435cf6de86d164019c43a2c8247570313c036751b8197119de216c854e4c944d7956e250dfaa7efdef97febbb3b8cf52a8b9e6a0c19b127489ffee51b49a14106bcbe9b22fea7ac8c9203011f2d48322263677981475c205478e845886a00749e2bf34b9e99719918d15097b57b9e275b4e7991713295189da3393e385ad90706a29440e8cba7d7cbcbafa63284c5f3ea0b6985844e70f5619867d3c56e717ee283806cb4df1af9499adf1b167f302ad099f7d4c6f1d8629fc77007c3f3fba6d1ea3d9b57bb0d04d5e429537aa77861a4be5f3947e0ff19a49ede7dfce00c7c497be293e391e6a29ea30b4ef2a70d3cb5b18e145d8dba0968a5e0cd12f2e34e3db24a753239ae549de2ca6276aaeccd552dda1d115afd31be8d80a879ddc0c970e3cdf4c3476ebcac36a953e53010a2d8904d61dff93871dcf93313416ca56c1819f9755d0a869ad966c9b34b43bc5343f35ae54f5cbf3fdb2290696701fa2bd246e434fa396f2f034bc35676f69e175232f494587d5d0a036f6724e27a0f9a67a2514c5e7a50ea79d21f3bcf52a02ba7c1d1312b5fddf2c6e582fa9f2f2385ddbd7ad7183cfc2b0f3a954a3f33b63404b6980a46e89d1aec376f6bc2818a14faa3a5d6ff0ca9babaf67bc35fd6b86f54d5c55639bcaca1fd573a9e542239821d253ed828c9a0fcfbee8a26dcb01437478421a77b95dc3be2e9bb877e5bd72094fb474b2df1936ccef282e9758166c195335f6e05ba6a62f3d7472edc4e1d4ceaa44de0bc68cd35404e7315b114a579047e3a18689ba18bc7721027890efebd517aa8e70984390b0b03b5fa15321b9eb33090ac62f8476334bf7136af49b840990361334265acc904055f22b0ce150dfc18cc0fb6914afd011a14184b304b65bcc067f29ef06d2bf3835b22607f6f3a15f60c5d561fa1a97a78b72a756093b6d8565d043fc30c6a94d9e6a217d76155f945370c1e745d40a3e7702da43fb8445008023693c871b5ec4cdf24d750b8d563643517099425376df434a42e38edcf11f916be11d184786dad0d7d132a16138d76bac31699bf028563b24f955e2f06cad7e0e676968f15c6c1f4c1f6ae76a7ba9cd01e3cf65433243f0a46ed613838bbc2cea71902bf30572d2ac1d644afc20b49ed85c1ab8271c42ebc6ff5cd90eee4f7121daa4f4e302ec2c112ce964ba46edf8f0674b38da1b0fbc0d8ed08704950fdb5d2e6114ce555ff11e7e19c071d7e6310829e4fa75b4694adc8f0718785f1ba0d9f57254de733aa6df9585be31405fa2237ebc7724a2526a69c9f05db77441f6b6967dcaa7b10343bf26e31c3e7ba333bac60ef02d78d25435da4120343aced7a31358d93609c774de72442570a87449c6ab3f0c285155361c19ed6eb1087b4b093816a7e9f097d200406de648580f33a321defd45b5df0979cac46bff3d1085dd30002c4be4d2aade1835b8233cd62e237cf13a16b5d362dc75380c3715b5063df1ae6b11f39a0025a1da5d09d1e71290863c5a4bc9781bb8ee40fd6bce74a12065f62988e504e55991019f4e863169e9da3868b2119ea5a4f6ea5b6d0afb62abcf808104c9433d5365a43ca158cb06bbb8d507440bc9d2dee35fee8f1c1bc43dceb6b74f799b9aa5eed95fa9c042bd2662af8a1156953d1f6f85709449ebee12bcc24c28d4deb10bbdeaaa49eb7d4bbde61bf4fef2a817aeb3c26726ceb2b668e120da806dcec47f41bc91fff5c68ed30c2808aa47aa09f89276fa803caef473b6b212cc6087085c2310e110106941206b32303f917c0a7a574aa953cdbedf76a051a4a69254492bf740d9ca94918047c476d5368a5bd5852113bafe23bdf9985f040c99da82c6b05280c5626e580777d73301e1f136e542082fb64e296253f3ae9e83e1259950ecea90a236433921d28a00e752de2029dfae74f20cfb043fd1524229c51f31eac50ede55d716d7fc467b35c3b448b9e8ac297928c75e85b6784ce4c90cb6de75f0432d5b0e43baf4215787ddd49164629a02c7e84df8316498cb56928dfe83a66908d33fb78241db555ef59c673790eb40db45ef3f59c6da7a1efae9495de4c795c774333e0c00badf4ddb958fe9b8aa54875a35f01b959f834561077be4ee899f7e51a83bdfdfd2732f2ed6b41ecbf1d14d81c85551071fd79e35d9e143d53c315d738824f70179a584907f1d79e789246c187413996b35949f9eacdefdff3a47c9478462736d84a5d76c2d5eef119fdf9ec032cedeb9623f8d7f1df279c43626afef780f5e5c0674d1abe339c12f131ab1568fe047c81651d3b64ccb2589ff421466972ee22a28bcc38c58de98810d60fd1a156a8d1d14eef4e646b64f48de8a868682f9af70153cb5a62f9285d197633140992a83e4db5918810fc3d877bdf49ba1156e7f621a3ed03309a32ca3279d54644149b2e4edabd6dff965ab75e451e418e7470a5f81934f263ff51330c2aaf5b6034f59d13e8995052a0e2b835e982ee603f533d8bb0132d0735d10210df924eee5f126cef28f357c56ab93d0d6afbcf7cab3d29dc505f39333cc8a5b83f0f3c49957d7ad6a5ac55f11eceb3e66cbe1fe1869da273e42bca749f48907f7cdbdc4c7c11167e03a57e9388de6f76dc2f07fd043371fd9cd72bdbeaf6e843e8d70594245ce3ed2a6c67652768d0b5a0a5b8b212472c70fdbc7a9edd727fa0e2155ce64bbecdcc288c0d02633615f325fe1c37d84c39494ec22f5c838ed348be7ba3dd5ab5b0264c4da3988552bd5be82f3d376dc63a4b7665affd3eee302566c688eae1173be346c81f9f828d51768367caa3b5720ae2a68e09a94421f93210dca0cdf46ccc1d8cd771832f6d4882005d851c4460a4ef3961173d9bc738e1d60601634fb2697708658c55e71e1b78b15cd63a6673301245084d1e38d3c7e10b2f4ab372379ad17e400dcdc91b052f14b642703a658928db8355beffaa49693ee2516ee33fe79aa84a3c3232de212a6761f65ffa7a0e4da0f692e9e5759d7c8bb43b8d4224a57f778034c9f0284abb69c01f87e394747e357374594cc5d1730c723cf9eba8fa75cae797487ead66241d868d931d72870829af4ed2f1544003ed02013915b3d26d4216b40e842fc245b3bd6324d34076277356fbe7249853ff06fd883b4bda47af58a1ca6cbf877e3446ad300bc913b9b7af7f9dad891aae27766519214c974359d1e4e2751e38bfe1da8944d058eb6e2fd8e74a7aab7c86bec5146727b482ae5a70b172036b2333182b9027685b35e40d541ba62698a140955e07a0eac584c20acfa307e378f0220d0f5cbdcf24283fb40670a40d1f0c173fce60167765c78961c22bd5f6a1b7e032fc1d5280c210cba7bdd541621334ff00cca65045725759273108bbfd931282f8684b30d6ba7bf105dea0b3719295d089ba9619b4f55e7b1a1a9b64832800ac4e211c53b3979e1cee91856c26810f1ce2fff9d309a433f09abd9832c7b150cb2c32f4ff156c97b17f447df2aef57c73bb2cb9419771b72d9093dacc2350054df4a4bfbf9a82685b355bd33097df2f286049a3937bca96efd233bc81f0d39f0dc425829ce16d85e0921bf14175f3f1816e5d7e66af861911aa6d8c7fcfdd68d86eee025bd4edeece14b010aeb0f1ab5899deb47b087f87292ad573ab28a3ea17d3fd28ab566cd0776888d95c4c05622242e9a01aa22bf035bc8b87f3c36a679e279d537c6ae80ab6b2c2d95971cdda99c638fd8092433b97d40d4a2b28802ebdb06d92d0b6c8a2799e3f7e26f4d15b039e27b2fea31e555d6f45dc6e8c8c97b4e54ffd06442a7e87469d705a643d7169db20828b46f38f28c528ddc79f04b2398444e659dd73b271a1814082283d5ecd56d06e72413a120728ff7937e2c74027dd7b3c31253be6356314082418f921884a76d1b99b437cde162cf31bbf45455345f6d746a0fe41af0971829f735513a2fac636cba2a53fe322a8d00fd595c637351bc09349e00c3085016963a4682157df6c664d97bf359e26c68a7d6e486fdfaf471ec0441c294ec8aa6311344352018e490649f7fdb03a495d7b4e6a84b5440cdc3e80639d8a100e93d5f2af4fe116633bf47b20ed8665276434ecb4a4f0f2c5565055dbd82738ebefa360b3c9d0c41bc80e7da63b8aad494137519ff5036812ead57222cb4e0963dfe9d98d88a3c7834566747c1ba3d049727376fc1c2da465f883134d67bf26e6aa7a4fdad403b2f", 0x1000}, {&(0x7f0000002180)="bcc34dce9b2aa4d4e154ab057359201453ccd3b17d5d9b2faca8897d9e27384f12683b7004ffe789b4c19956fa966ca955139506b7fab99299cce6228533fc9d0fad4fedc6ca1b44a50d4103fd5efc54c283a6", 0x53}, {&(0x7f0000002200)="09b7ef542097153ee6d6815011d9cd46fdd8cb3a9b625fc9f1c00cff01a7afa09f7225c9d70c02952da9a8aeafc0b72852c63e4d351163710d5f7a77dde42464a9ee1425c1613a17b42de068cbf347d9b1395d018185ff47587d9691fabab253812f5de6ffd9ad189d158d552f1421e6f9adc14ade1b4b1346", 0x79}, {&(0x7f0000002280)="6a2f336229d836702175651c2f5879e22f10a94ebd3bd43e516db64e6c1c15c86c2569312dbe534d6b5e3dd5379155678ff833420c5a2c00991c420890b4c047eae7b1930c1421f705e5e7ee890b463921a9a6db2383f87624d7d19df79c91b950b0d9dc048ecc8cd8370903be20188d05225944d63283e5ef7f67d39999744ad56906dad23ec87afa17700346206863a419faea0d88e364579e6ec902f82a3fb3670a0dc83e675e", 0xa8}, {&(0x7f0000002340)="cde58b7444cde20a7e", 0x9}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="46e27c4dc3b483d2df186ee2c19bc3dbb727ea186510db83aaf2130970e68b75108ac4def6c92baa178f40736c1e300d1277cfa1c25d1647d5fd5c99ef9347e8e1f990cf34c19299ac10ecce1bd49d5df842a40db049df79c4ec44d50dda98994cadf2c2d37b032a36ca05d86e5666761c6ebc9bd32a0ebaf461ab43c11515a23af016b889fd28022f3689b4513d953715342a7f815e2cf0efedddc6b47ef290a693fc46af78b80eb6c3657ed83e79c89067a1b5a727f525f5dfe7", 0xbb}], 0x8, &(0x7f00000034c0)={0x80, 0x11f, 0x4, "0b49c8162b173011f9aec9dcb78314866bfba537582145f631b4526a77facd735d22a2c65776c65b4167d50243e08af16f754bc48c9e6fa03fcb1b5e7c9adb2accb5d52f4b1166c901d04c46f032ae300c5c248e220b9f50a3bee458c74803e84937ccbd25c680c211dda5e936"}, 0x80, 0x4000000}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) bind$netrom(r2, &(0x7f0000000080)={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 01:36:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@remote, @in=@loopback}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x42) [ 425.070651] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 425.070651] program syz-executor2 not setting count and/or reply_len properly 01:36:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000007003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0x26, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 425.207454] audit: type=1804 audit(1545701807.304:82): pid=21616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/521/bus" dev="sda1" ino=17616 res=1 01:36:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xfffff000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0x6], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 425.279741] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 425.279741] program syz-executor2 not setting count and/or reply_len properly 01:36:47 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x20000063}], 0x1) 01:36:47 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3, 0x1, [0x6a]}, &(0x7f00000000c0)=0xa) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x8, 0xfbcf, 0x10000}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:36:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000029003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x806, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r10, 0x4008ae73, &(0x7f0000005080)={0x6, 0x4}) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x6060000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f00000000c0)) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x7ffff000}], 0x1) [ 425.978522] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 425.978522] program syz-executor2 not setting count and/or reply_len properly 01:36:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200007a0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 426.098239] audit: type=1804 audit(1545701808.194:83): pid=21659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/522/bus" dev="sda1" ino=17661 res=1 01:36:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xf000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x6) [ 426.207979] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 426.207979] program syz-executor2 not setting count and/or reply_len properly 01:36:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0xb7fe, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020030000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) read$FUSE(r1, &(0x7f0000000080), 0x1000) 01:36:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x2) [ 426.484163] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 426.484163] program syz-executor2 not setting count and/or reply_len properly 01:36:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) timer_create(0x5, &(0x7f0000000100)={0x0, 0x2a, 0x1, @thr={&(0x7f00000000c0)="007d34cf23a507848c998eb9faa87f60a14f7f8f1211c94f142acb159419cba8fe2113f072cceb3568", &(0x7f0000000180)="da8b109cf4931ddc2095a63ddd5b74d71f547858329496ce4898953929b887edd56a8a890b0ba467fa392daccd642038b616f72664d1bcf70758fdeb73b331be00e6412927e78367d073670bda543a24e01d0935bf440ccfa203a19729a511d22cc1584e21291f1e18a9cb3123c3167347fda1fda9afe02942f6227bed13d85b53d178d2e49b4c0d50e1833405e9807377fbdf5178b80ac37560b003d914e542aeac7c5dda37b9ebe508f6e089fb3ab7a8634e6b5b4ce4c216716f97890a6a41752c097d26f0f18fac3e3a0053b500f7fe60f7d90b515ba05d00779629108c7bed"}}, &(0x7f0000000280)) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x4305, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x8) 01:36:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x10000, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x80000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x101000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/mls\x00', 0x0, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000001540)='/dev/snd/pcmC#D#p\x00', 0xe55, 0x40000) r8 = syz_open_dev$admmidi(&(0x7f0000001640)='/dev/admmidi#\x00', 0xffffffffffffff7f, 0x1) write$binfmt_script(r7, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x176) r9 = syz_open_dev$cec(&(0x7f0000001780)='/dev/cec#\x00', 0x0, 0x2) r10 = syz_open_dev$mouse(&(0x7f00000018c0)='/dev/input/mouse#\x00', 0x1, 0x200) io_submit(r1, 0x8, &(0x7f0000001940)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, r0, &(0x7f0000000080)="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", 0xfb, 0x1, 0x0, 0x0, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)="ee5cc3d689e9ba9582ffbf298e6d5b", 0xf, 0x1ff, 0x0, 0x3, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x10000, r0, &(0x7f00000002c0)="2aba18a5ddb467f7e3a18f77b4e73c9a67b2ef368cfe70cf72c0d644717c530591790a66b6cbff84bf0c517a5d722a520df9b65a1c2cfa67584f1ba0e426224dbdda7dd774e65c1f2839cd99aabfc6882abef652d708f53ccc94d2f1bc002866b7fcfbf22e00cfb991f47c2312827d3a1be0e735a242cf6736242a26c79c453c1a8f8f62260716d1837130844b735171098089f71b92bb86bf96ff90f79c53da358c68e1d82fe4b4e83f687cf5bfe6987776a54b6a1b45d42fba6d09d3267cbb3d5fed66043e80ebf14378a6a837ec5ebb6debd7fdd2ecc936cd289047cc03d053b0c5c8192774ac94aed550", 0xec, 0x3, 0x0, 0x2, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x400, r0, &(0x7f0000000440)="9fcd4a9bfe68216567bdc5350e296305008d985a8b84a167001af63b6c572b93926064e68c5defed0f01fb39f3ca8ffbe632c8b30baa9f69a8aca9f3d71ed0d54555f85db88cc4f530582831ac6eb63e1e0d0a55eba482dd316f8447b83bac", 0x5f, 0x3b8, 0x0, 0x0, r6}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000000540)="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", 0x1000, 0x3ff, 0x0, 0x2, r7}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f00000015c0)="3a945985774b2b23b280f67baabdccf2f0d59fb68532be6e8b82edf60d15a473e5c6897515313a41be2d75820c33f6f826bd288ce319cdc63c5ad20ba21619bd177295d4c43d33", 0x47, 0x1, 0x0, 0x3, r8}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3, 0x80000001, r0, &(0x7f00000016c0)="9edf1adf5f90613758672b7d3339bc0087b222206c4d3241efd07f46d5c1afeffc7ebbfcf94beffcb014124b7dde8418f0b9378f0a28131dc6e5cac6533ebc9aa6dc746c56e96c38e7e3b3c7994fdf576b38bbea106cf56dd878a9778016c277a650322ad10a37bcc8cce780cd883754936a3d2433295740b4580169fe9ab47f4be31fb0af8e119c7a85ec89ffbffa9d55ff7ea32a072c462cee57aefe20a8303dff3fec5c3925eb3419", 0xaa, 0x5, 0x0, 0x0, r9}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x6, 0x733, r0, &(0x7f0000001800)="a52170a47df5566fe5c71a619f2549d4bf09ddfbf3ee97c3c544279ab227d5df252a0a6d89f5bb45c2fe69e5102fa2fc948be5c7ccc94b6ccf4d956eecb435ab37d59383f6722282084f3f39e6505b262659749975611b712360eceafa7c251111ef4008377487bcaad01d5642adcd7dbe4b348036cc99b4aa848450d5e473b2c21c5f024bf5b21828c073592a32e8e867208739700807163be6e6b70721c881f2812d2be29d228376ad1a6619ad157b38ea05f467dbc7c9baaf4a237e30", 0xbe, 0x7, 0x0, 0x2, r10}]) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r11, 0x8004e500, 0x0) 01:36:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02007fffffff003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000030003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x300) 01:36:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x804, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/127, 0x7f}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/218, 0xda}, {&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000001200)=""/107, 0x6b}, {&(0x7f0000001280)=""/249, 0xf9}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/201, 0xc9}, {&(0x7f00000014c0)=""/235, 0xeb}], 0x9, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) [ 426.999888] audit: type=1804 audit(1545701809.094:84): pid=21730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/523/bus" dev="sda1" ino=16561 res=1 01:36:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000009003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:36:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000006c0)={r1, 0x0, 0x7, 0x100, 0xfff}) r2 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x9, 0x20100) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f00000005c0)={{0x3, 0x0, 0x3, 0x3, 0xfffffffffffffff7}, 0x8, 0x9, 'id1\x00', 'timer1\x00', 0x0, 0x3, 0xc71, 0x7fff, 0x384}) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0x4, 0x0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000540)={0x20, 0xfffffffffffffffa}) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000700)={0x0, 0x0, {0xc, 0x1d, 0x11, 0x8, 0x8, 0xe95, 0x1, 0x7b, 0x1}}) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000740)=0x2, &(0x7f0000000780)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0x8e, 0xbf, &(0x7f0000000180)="b8a15f68409aba3bad290edfef9ec20ea48ddff5b923b2042f63fed1d60711b6f2cdfe86d4753aa189f87e1e8668ab0547a22d4ee1905c0e5229a653b7ed0be6a6fa47f4565874f45685173cb4398d140165a47386322dd7989e39416ff903b957dce6defd8e5d01cefac90083ac42498e7dad3deacbfb9016aa27007a72819422e78997c074209b263bfac4b3ac", &(0x7f0000000240)=""/191, 0x8000}, 0x28) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x81, @loopback, 0x9}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r6, &(0x7f00000004c0)=0x4) 01:36:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020074000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x860, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x6c00000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000000c0)={{0x3f04}, 'port1\x00', 0x20, 0x20000, 0x2, 0x7, 0x8, 0x5, 0x917f, 0x0, 0x5, 0x8}) [ 427.825900] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO 01:36:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200fa0c0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4000000004001fe) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) [ 427.939358] audit: type=1804 audit(1545701810.034:85): pid=21785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/524/bus" dev="sda1" ino=16609 res=1 01:36:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000180)={0x3, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$KDDISABIO(r3, 0x4b37) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 428.059246] sg_write: 4 callbacks suppressed [ 428.059260] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 428.059260] program syz-executor2 not setting count and/or reply_len properly 01:36:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8202) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r6, r8, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r9 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000050c0)=0x14) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x1) 01:36:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x4c00, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x1) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000080)) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020007000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:50 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000180)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x110) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x808, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 428.704341] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 428.704341] program syz-executor2 not setting count and/or reply_len properly 01:36:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) [ 428.750916] sg_write: data in/out 167162/224 bytes for SCSI command 0xff-- guessing data in; [ 428.750916] program syz-executor0 not setting count and/or reply_len properly 01:36:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x814, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200ae000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 428.848667] audit: type=1804 audit(1545701810.944:86): pid=21840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/525/bus" dev="sda1" ino=16721 res=1 01:36:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000100)={0xb891, 0x8001}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:36:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xf0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000080)=""/84) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:36:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x807, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 428.991223] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 428.991223] program syz-executor2 not setting count and/or reply_len properly 01:36:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8202) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r6, r8, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x1) 01:36:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000cfa003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x7a00, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x1ff, 0x6f5, 0x3, 0x2, 0x0, 0x2, 0x1, 0x1, 0x0, 0x2, 0x4, 0x88, 0x1e, 0x1000, 0x4, 0x0, 0x9, 0x400, 0x1, 0x200, 0x4, 0x100000000, 0x100, 0x80, 0xc92, 0x4, 0x7, 0x8, 0x81, 0x1, 0x9, 0x76, 0x3f, 0x100000000, 0x9, 0x8, 0x0, 0x7, 0x2, @perf_config_ext, 0x8004, 0x8, 0x8, 0x0, 0xfff, 0x6, 0x401}, r3, 0x9, r2, 0x8) 01:36:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x818, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) inotify_init1(0x80000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000080)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) 01:36:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x16) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000200)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 429.727283] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 429.727283] program syz-executor2 not setting count and/or reply_len properly 01:36:51 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x200000001) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x700, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:51 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000005003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 429.850863] audit: type=1804 audit(1545701811.944:87): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/526/bus" dev="sda1" ino=16641 res=1 01:36:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x4800000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) [ 429.960252] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 429.960252] program syz-executor2 not setting count and/or reply_len properly 01:36:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x500, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xd55e) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0xfffffffffffffe72) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) setrlimit(0xa, &(0x7f0000000100)={0x5, 0x100000000}) 01:36:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000006c003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:52 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/85) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:36:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x4c00000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8202) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r6, r8, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) fcntl$dupfd(r0, 0x0, r0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x1) [ 430.645555] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 430.645555] program syz-executor2 not setting count and/or reply_len properly 01:36:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_SPORT={0x8}]]}}}]}, 0x38}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) getpeername$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x2000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)={0x0, 0x8001, 0x2}) 01:36:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x8906, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200000000ae003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x7a00000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 430.804030] audit: type=1804 audit(1545701812.904:88): pid=21951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/527/bus" dev="sda1" ino=17041 res=1 [ 430.862398] netlink: 'syz-executor3': attribute type 17 has an invalid length. 01:36:53 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @empty}, 0xc) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x7f}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0x10000, @local, 0x4}}, 0x7, 0xfffffffffffffffd, 0x4477, 0x10001, 0x42}, &(0x7f0000000280)=0x98) [ 430.912980] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 430.912980] program syz-executor2 not setting count and/or reply_len properly 01:36:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200fbffffff003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 431.194102] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 431.194102] program syz-executor2 not setting count and/or reply_len properly 01:36:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x5, @loopback, 0x1}}}, 0x84) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x80000) getsockopt$llc_int(r2, 0x10c, 0xa, &(0x7f0000000000), &(0x7f0000000140)=0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/144) 01:36:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x8035, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x2088, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200004c0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8202) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r6, r8, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0x1) [ 431.657030] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 431.657030] program syz-executor2 not setting count and/or reply_len properly 01:36:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x8848, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000300)=0x7, &(0x7f0000000340)=0x4) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0xffffffffffffff6c, 0x110100) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000200)=0x403) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r5, 0x800, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) 01:36:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x40000, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000ae0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 431.746438] audit: type=1804 audit(1545701813.844:89): pid=22010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/528/bus" dev="sda1" ino=16609 res=1 01:36:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x606, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) sysfs$2(0x2, 0x5, &(0x7f0000001080)=""/19) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40100, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000001180)=0x9) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000080)=""/4096) read(r2, &(0x7f00000010c0)=""/185, 0xb9) 01:36:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x80b, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x9, 0x38040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000100)=0x1) prctl$PR_GET_TIMERSLACK(0x1e) set_robust_list(&(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0)}, 0x2}, 0x18) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020002000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 432.035021] dlm: non-version read from control device 185 [ 432.097916] dlm: non-version read from control device 185 01:36:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000048003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r2, r3, &(0x7f00000001c0), 0xfffffffffffffffe) recvmsg(r2, &(0x7f00000034c0)={&(0x7f0000003240)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000003440)=[{&(0x7f00000032c0)=""/94, 0x5e}, {&(0x7f0000003340)=""/222, 0xde}], 0x2, &(0x7f0000003480)=""/40, 0x28}, 0x2043) fstat(r2, &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003580)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, [], 0x13}, 0x4e22, 0x7, 0x4e22, 0xffffffff, 0x2, 0x20, 0x80, 0x6c, r4, r5}, {0x3, 0x3, 0xf30, 0x1ff, 0x1, 0x0, 0x0, 0x74a8}, {0xfffffffffffffff8, 0x5, 0x5, 0x400}, 0x6, 0x6e6bb2, 0x2, 0x1, 0x2, 0xe5fea1cd295ba1de}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d4, 0x3c}, 0xa, @in=@remote, 0x0, 0x0, 0x3, 0xfffffffffffff000, 0x94e8, 0x9851, 0xd9cd}}, 0xe8) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r6 = semget$private(0x0, 0x0, 0x26) semctl$GETNCNT(r6, 0x6, 0xe, &(0x7f0000000200)=""/254) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0xffffffffffffff46) ioctl$RTC_AIE_ON(r3, 0x7001) 01:36:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8202) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r5, r7, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x1) 01:36:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xf0ffffffffffff, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x80d, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1000, 0x8000) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x5, 0x400000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x101, 0x2, {0x10000, 0xda, 0x6, 0x1}}) 01:36:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000680000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000180)={0xc, "3e24af72452d0efd00d7fdfbc4be37ecb76c0055101e9675b248d9073a35ed6e84114a5d80c06951a5d8912069c678d5d04bbeb97a460b01e2b8ca9d2012d3faa186ca8cedad1ad91d431c371bf22c2409e3893abf42adad26e4ed37e38e5bc502bcd3e9b04102a0417bf6b45f9f4ff0379f37a2b3b5ac552f074a74a806dc1d"}) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f00000014c0)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000001540)={{0x5, 0x4, 0x513c2252, 0xbcc4, 'syz1\x00', 0x7fffffff}, 0x0, 0x20000000, 0x1f, r4, 0x6, 0x7ff, 'syz0\x00', &(0x7f0000001500)=['wlan0\\*\'keyring\x00', '/dev/sg#\x00', '}##:&\x00', '/dev/sg#\x00', '\x00', '/dev/sg#\x00'], 0x32, [], [0x0, 0x6a, 0xb116, 0x3ff]}) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000001680)=""/63) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:54 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40, 0x0) fcntl$getown(r0, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000003ec0)='/dev/sg#\x00', 0x1000, 0x8002) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/173, 0xad}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f00000002c0)=""/162, 0xa2}, 0x9aa}, {{&(0x7f00000013c0)=@nl=@proc, 0x80, &(0x7f0000001740)=[{&(0x7f0000001440)=""/199, 0xc7}, {&(0x7f0000001540)=""/213, 0xd5}, {&(0x7f0000001640)=""/56, 0x38}, {&(0x7f0000001680)=""/155, 0x9b}], 0x4, &(0x7f0000001780)=""/240, 0xf0}, 0x8}, {{&(0x7f0000001880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001900)=""/131, 0x83}, {&(0x7f00000019c0)=""/223, 0xdf}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/144, 0x90}], 0x4, &(0x7f0000001c80)=""/253, 0xfd}, 0x1000}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000001d80)=""/92, 0x5c}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/118, 0x76}, {&(0x7f0000002e80)=""/191, 0xbf}, {&(0x7f0000002f40)=""/66, 0x42}, {&(0x7f0000002fc0)=""/237, 0xed}, {&(0x7f00000030c0)=""/142, 0x8e}, {&(0x7f0000003180)=""/113, 0x71}], 0x8, &(0x7f0000003280)=""/116, 0x74}, 0x101}, {{&(0x7f0000003300)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003480)=[{&(0x7f0000003380)=""/38, 0x26}, {&(0x7f00000033c0)=""/172, 0xac}], 0x2, &(0x7f00000034c0)=""/191, 0xbf}, 0x2}, {{&(0x7f0000003580)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003600)=""/184, 0xb8}, {&(0x7f00000036c0)=""/28, 0x1c}, {&(0x7f0000003700)=""/185, 0xb9}, {&(0x7f00000037c0)=""/245, 0xf5}, {&(0x7f00000038c0)=""/218, 0xda}, {&(0x7f00000039c0)=""/124, 0x7c}, {&(0x7f0000003a40)=""/62, 0x3e}, {&(0x7f0000003a80)=""/153, 0x99}], 0x8, &(0x7f0000003bc0)=""/92, 0x5c}, 0x7}], 0x6, 0x10040, &(0x7f0000003e00)={r1, r2+30000000}) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000003e40)=0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x802, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02004c000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 432.648313] audit: type=1804 audit(1545701814.744:90): pid=22083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/529/bus" dev="sda1" ino=16593 res=1 01:36:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x30000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:54 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x1, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 432.757144] Unknown ioctl 35090 [ 432.774652] Unknown ioctl 35090 01:36:55 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8202) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r5, r7, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x1) 01:36:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x600, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000002000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:36:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) write$FUSE_STATFS(r2, &(0x7f0000000180)={0x60, 0x0, 0x5, {{0x7fffffff, 0x7f, 0x9, 0x6, 0x5, 0x40, 0x1000, 0x1ff}}}, 0x60) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f0000000100)='./file0\x00', r2}, 0x10) 01:36:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 433.471217] sg_write: 5 callbacks suppressed [ 433.471231] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 433.471231] program syz-executor2 not setting count and/or reply_len properly 01:36:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x50080, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x200, 0x101}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x300, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:55 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000600000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 433.605533] audit: type=1804 audit(1545701815.704:91): pid=22142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/530/bus" dev="sda1" ino=16545 res=1 01:36:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x802) [ 433.739571] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 433.739571] program syz-executor2 not setting count and/or reply_len properly 01:36:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x4) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r4, r6, 0x0, 0x8000fffffffb) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x1) 01:36:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000740000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x6000, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) 01:36:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000100)="b63db8af1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffd32c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x803, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 434.466613] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 434.466613] program syz-executor2 not setting count and/or reply_len properly 01:36:56 executing program 3: setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xdb, 0x6, 0x401, "725bfaa710392b8282c416d321dc2d03", "2b3587de96ec12c2f07f97b4807176b7e61a56cdff3bc4cf5578944d409bf9e94f230ea6ad96c9bbf5014fb4a3ec4c26deb1e6214045871b6bca2642e696eba41aec457a508ad3b53b336602a43792412fb45f3315e807c69fd08fc771c7cdd7abef2d8cb74025060044a8b1c633a2b796af3d2b4cefe9f7045e304878ec4e572bba0dde8a275f640ac93c42456ac739606ba05875ee0c8abb6aeb9087607885ac1b10e9d960b77af89ffa750968fb141e6a228c4eadc854817c3b80646fb56dbdd9e2ff1c9d"}, 0xdb, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000100)=0x1, 0x4) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x4000, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x2b}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x6}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x37, 0x77, 0x65, 0x65, 0x64, 0x32, 0x63], 0x2d, [0x39, 0x63, 0x77, 0x61], 0x2d, [0x62, 0x34, 0x7f, 0x33], 0x2d, [0x61, 0x32, 0x3c, 0x79], 0x2d, [0x3f, 0x66, 0x34, 0x67, 0x37, 0x30, 0x77, 0x31]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'mime_type'}}, {@subj_role={'subj_role', 0x3d, '/wlan1]+(!'}}]}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020003000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 434.632586] audit: type=1804 audit(1545701816.734:92): pid=22200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/531/bus" dev="sda1" ino=17313 res=1 01:36:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0x0, 0x2}, 0x18) [ 434.782120] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 434.782120] program syz-executor2 not setting count and/or reply_len properly 01:36:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1) 01:36:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) accept4$packet(0xffffffffffffff9c, &(0x7f0000002f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002f40)=0x14, 0x0) sendmmsg(r0, &(0x7f0000006240)=[{{&(0x7f0000000080)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="a33b51e08f80212f89e6cb0397533d09d5b5cdb18b16467b9cddd56dad2595dcb0dcead834c37cc32ca5c020f81da48bf6fc6eaf21253ba2fc67ad7f1052989e225d60f8df46f78abca95e8c2b3dc556e02879ba9685d6a2a130991a2d35b5d67d8bb6aa2c09069416808e3b08c8df0fe2f84f32dbdf23d54ff4ab2a319f43da8c9050086a07b3e1b6cb8fc3246b310f3ce13cde65f9083c59b86fed56b2817fc45f8b61f59d", 0xa6}, {&(0x7f00000001c0)="093ddc865ecce083e63c9020a22019c2f9ec08406e4b64b46ece83c3d19c47d2b15634964fb7b731bd8a7e3db73000dfbc3d789112193e310647f1cc0003a98d432f1cd6426c58fd4ab15a4024409884832660077ac56369dc6806c26f7570adb377c9a7efb5cefe182a5d6a4aea0dbf10464389446f4ef3ae16852b83b540f1a646d181cb90b868fe8ab32db53fb8439015758db5f6", 0x96}], 0x2, &(0x7f0000000280)=[{0xa0, 0x11f, 0x1, "3d4088a6bef3a36e5e4ee8b297ea3a0dd310f8785030c6a8628e4772d5dc3f3869945b0044c460b298c65ba2874e5c4395c8e924f31a88af8a641c899c1a9efd6bce9b9e4c2567f776bd1577cec017fa3ae829ad187f00c6f2ae7700c97dccee7c19f1ba86393182782b60b60b13850798ad32fd06e0d415e7c1dd646016921d45c9a916e5b80cd3e7651f1edc"}, {0x20, 0x104, 0x9, "e6c3a8d5d329a0d60130ca33c941"}, {0xc0, 0x3a, 0x7, "37d0a4124f064fe8af32a452efa11e7bbf27b4e3a818eaff6fa23f82904f0896ccffed5d70759042bedb6136836bcaad6d9ae9be55bf7516432d60323c6bc5f28d9c9d8f7ad946aa9594f24af255416480e34048c83171fe2f539a11fd2ec1977738e130789268353e14d3f7441aec49ea2743e389deaa04677641453f64b420fb721be8457f3335074124df3d867b9ba5f2e73a9237994618552aabf1119b9aefb23c20c92e947d921cf2b41f1ca1"}, {0xb8, 0x0, 0xfffffffffffff800, "672347922dff32a26b07d09ce7903fc598f8b99cbfd3f295ea91fd64d9e504a965db6c079500596caad519b281ec6bee89b3f5e343477e5efb7bf529b92916221d6045c17f535880f52abf2a368c746c797238f8290d03b027f98b97708ad04c664cdba95eea0b8b6851779cadd00ce91234e6839fe684b71e1afbf4cef9eedc40f3c0e35cc086d91bc59db0411747d7ed766c889b35faf49bda2c3386ced52d76ce"}, {0x88, 0x1ff, 0x4000, "8e59763791a063d5881cb733eb863535eb8c2a84e7d03260ea47f9677052fc09509c79724e2cbab876bc4757fffa3fa6d57cf07da96fed8721017a409cd2b48bdc195a7fd3dbb3140946b831af961d6e6c379c36c60815614742d88cf49b41ea1b17885dd3b6f07e62958e0e8165082133fec43b4574"}, {0xd8, 0x119, 0x4, "a35b42b84724280ea8b9ef09d194600e3e4b41d49ae7e44664680eec98da28440baf149c5e5af7917844a0b70d43b03cbff107515512675c54baa3f44f3253c2d0eea41e70696e2b02b4bc96b1141c61ba5df0510de4068be2b6faafd2091a1bc06cd90d43a22a14e3b972281c17ec9476709229efc20f30a8d6ad285497cd0cc569748b7755d8e4aeafe160a5fed338cb117818cbf607b7a703e84ff39fb078c3d1891ba45d2e7ac7f5dc92ecbdb2b67ded91e542a3bf2ae90b11cd4586c192b7deb6ac"}], 0x398}, 0xe97b}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="20fce35e7ddf1a8b4b8cf79563b618e08820e2b5f93d1da26b2216136f36e6dc03521b946dfc09d48d417f1f1dfff8d4701f8e6ad9f2f9f4da9801c93fcdd029ca1c1ba9086cacff5c572c18278e0d71eeaddb6a84cbd6a42da7e55176e818fe44fe2e5bbfd1777cee05937a4a453d185eb1266fc4e949c0a92da74415970a4e4c9f9a6693285419d7d9f7f6d59cb412dee57ccc0f3d18562374220b014429c41d0107cf399a9fb306d974f7c14b7e81fcfa7a", 0xb3}], 0x1, &(0x7f0000000740)=[{0x108, 0x0, 0x5, "4a2093a67349a7de9d8b225366e22ff952ea93dd68a748ceeedad5c660284cadbec625f5d091b5489d2253610673fb95c3343a0a74dbf3998ecf5992ba7e2a19e5e495f50bffe52455be88004ab8ffaaf829578e83c2526737427f777dcb99a2a50a0c07b2e85a27659cd39269107987835675a0474f2573c51be4407a5fc3d474c4edc9fd576113fa6f1b35d47dcbaae98349f0f75d1d76f3b78d06c23595fb450e2573e37fe513187cba9b819260032f87a2d2e44c3e330c0bfc87f8836c793cdd99f79bd59cd12da255cbd208b9f34d0693c3c3743ce24322a86e570514e8f6e678cd601273a52643bb4e4a4f0df33d61"}, {0x38, 0x10c, 0x7f, "34803c86d2510ce2c3b478a5a90ef2b0fdeb5b966991fc159e4c5b9a333d3670c89d8de9"}, {0xb0, 0x11, 0x2, "acdfe17be8b887cb0ac720e5746fbbc63e6a4d9ae96b27ec24fd1aa483c946b723f05fc644948d705ceacef0ae9405b56486d48383102210f54e953b6a564f87361e27f68f6a2bc1af69362cb04f04f7889044208d6618689919607138308593616b010c17a28a202dfcdaa183fd08f32f76bff01b7ecbe667a86dd678a9c27fae2369794e768366f0db6d219d887f3a93cd0bb8793d0781a2363fe15612"}, {0x20, 0x117, 0x2e, "a0d8e3bd6a223dcc30203b"}, {0xe8, 0x0, 0x9, "a3c2e3512ce917d3ce290cc432670c373c8fd71ad0d82fcd45ff8e686a72999b37f9c0d1cb0c7421d2515308480839a73504f7903df36533742b340c0d7daf6bcf1fc587210de1223dc0b7e025a4add588d3d901ba842875953a362c98196b6821678b5cd8a6388907135e0bccb88eb42017cf3475ce4b202809ca68037cd5fbb6ee5ef5de0a5830254d964773a44d3151b780fbeb754e7158588e043fb5519a53720df5540bc700de251bea2c25fd86201638fcc0c5d8bc91f4792ebe9a14a82375eb6ac03eafeb41f62cef021bf481906ea2c4c849"}, {0xa8, 0x84, 0xfffffffffffffffa, "7d21e98664551c2ea68e057c69cdef05d625695b32a1c901c7fb789bd74ac267075a1a9beaa713f2cca111f72be15994fc17a663364001948d69ab9f25369694d90f74245804e53acaccf811d4e3af77342e94966d9d3a17769e235bc23b56403bf9c76bcc1f3788dbe2823a21f57396e49c80d8fbc73424dd8c0b06ee18e20e51e4d13ab399c49489b25f6bacd5a03eb92e494e"}, {0x60, 0x115, 0x2, "f7461d2c6d80d1697f5d5e7a9205906579f42ed2537fded3f7dd042e12302c2b193b18d7656f5a3114b0c2a629eeabdd3ebf518db2781d527e24ce85e22ec0b36ee20ae429aa54cb8e2017c8fcb2cf"}], 0x400}, 0x4}, {{&(0x7f0000000b40)=@nl=@unspec, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000000bc0)="227e6d47b531faa4cf74174dfaade3111d6bea59642d96825bbe95daaf8f", 0x1e}, {&(0x7f0000000c00)="930b581032d3000ade2faabc303dba68b7", 0x11}, {&(0x7f0000000c40)="cfafc7f013936993a0f00b8a46a164bf84d785c700bebf3c285a756319623e1836104e557a6bc533c5e672f18d15cc0be339ff2264ff4900bb95aac334a5f9c06379c6f88c075ed2d69d77684da7cc1759c8edadc1139a024eea513e6efb4f1f9d29fea212e3670993181ac9dd4670d8387a00155b85721d32eb010d652fcf85fb3dad6a61e604ddaa926b8710b5fc3599b9b6f360600011b894e554b7dd02b4ec151a91ea98cfc64fe6ef3f435a14ffa54aae6558b1a7599282da519bbc75d385b23f59f8f575f398eb80cb7888cb7313fc67e9302d46b284b8a792c6cb9f986cb1f58f44c389a5523be851d3bd85acd73b8bd6668696b8d5abfbbc37919278266bcfc0d0b7ec3bb0a96b7903cbfe391dba1a872fc27fab89cddf0ea53a22f42d279b4d1002e3120a2538f9a416f6bb3a2096b3aa97996bc1ca62dbbe7c1ba2314c9431c32e0010fb3330810ef60d011a7d15b09f9ffa2a73e894a249a73cc82f002c24edc3a7286cf98a7675058f292e124d57a6f81d31d68c2aefac8cbda507cd106db2959ce8bc5646c448bb700b7ec3a97a89986ee0bf2dcc8c7d834ce1d21a91b1ba9485dd9ec49bd36c9aeb5398bd4fce2bae2c5978ae519b14e399ce2def99bfb6a3933f5257dfd079eab4bbf1b220c02b6174d252127e865cde02c0a1e550e6c7042523b7b3cbd7bef1e5dab1431764ea75d73968f965d6fdb0fb44fe65ed04f4b904ba865b8d2a7ceaff75830b9479159c460d5378a51e49c0f09caa28e1ee9dbcf9a10ba7ef5e7becef53eed2f610655efc90f61c43a3e4fd7a2451bc7c55498446297d52dcf6e6168d4d75315773616eeb314db69ce8d7249edcb1e16e284408329b1b7f72da44ae66c1a0b4c82de3adffcf82e15da3d8b31dc6397d67c8c26c2be218487db7047998a1de06f0756dfc96587e661a7b69427bd38545bc3582e86a457d37951a33499ba6aac0c852c45597d3c8ef0209cfbcb9897c966062b192b7c07293772ee285bcd1482d05f54428c1c52a54644500486fb0f89f1c81a62f3e1f65bd9a8e3c59139c7958d8b047c816ddb89c0782b5c0a6d1efccd502fcba3c261f5738a93011afa18facca45b59b12973d60ac28e6f1bd8427c3658c6f8a8fdef8d3441ea6153403991112121be46f7d5ab33ab62a1a855c05e3623bd4ee044fcbde6d166169aa525fdd93e2dbdf3d1cd4790e1387798fb3b945f2272a4eaa9bdbb9309fb3d65dbc96cb699debc3b3bc68fb8d181467a294e83c02d92fc6c00af5bbdb01b9cf6e58e6d030125f5bd7edad7a233b341f1bcaed7338b4a36d0c918caee72971764396509af65bd57c12de2d11dadfc17012caa6d6e4b5156b7d03cd5265770f5ee5e79bcaed065acec48e4c9d8224bba02ac39f589bb78be1117d1c7119ac017053ee74a219a619150ffe4c31491712883be5b60b099345cca6b4a25370731ca1143e8f3f9a00b02914b4d571f34d8dcadfdd90296b81e949db65ee1d3125129bacaf36478390eee45de1f0765aa1fca9d5d6e8e9f8da1640082730258bf8a80ff536a01d484cb1ab286d4931b56bc75caea8b74ce1879ce09ac47762a38bfd87ee13be4ebf07c3715bfd1480d87a60a47208e578b9065ae565bf645859080504bb9166df4d67382c56b726385ebffe34f4bf1462257a97a684553f89710a52c16d91fc44e69a228e9f5a482896bf4d1053f477bec33a6408172d5da0ec1f8d2831b27e6f03c763153b00e52af63e2b2c241f640393b07285b1dcd6c954869d544109ca8fcd08b4213a8fe436ec82ef7c44d83330d79c8e845a8d36e24b7d60ad2fe5a67e5ecde9dda06ea3a55d3f30d62b90d5efa14c9368e986474da0d6d2499c280b951eb0aaaa0f06ba5262326e824ba54e53c92abf2c03c29f8b0596fa10454f2ec19a40a22c1ec0c337a840b84ee0e503751f4506edd248c582dae57d77fe3d5582929723ae77d825248a8a7dbb0b15d623db2f91534f53d1599f7f8f95a70b1af78ad5ebca62c0729e0e84238a60c075c81a21563c7c2295944fbf28a887549da845005ad4c359ce4e9cf983e27526d7ee6c11e8cc2a7a1479c84a95abcdeac0e05caefe18c58028eab8018630bc1aef8048338e242031bbc02bb00e99850aef9515f20b4a735e57fa0489a6b91e2f7c03437176c0b3c63ecc605ef9321295732a8cad18a063889f11c10ced7277d6bc8a34743967e16ec0081d6d9d16bdc75bc3f5fc1b58f63523c9715b76fd0c3b80a74da992bb282b77d3ff63a3c270bf4768f9e23fcf2b50f3e8a2171f36f6fc5b3755df0d48e0c01433abc5e1cc8c6f249d76d06e1aa2a7b9b9cf67af5d548e66c0047be1fe1365f5564a9d25296a425d59b4c913ee3540ca2bfa9b28656b90f512d2a116f3f193e6fd96b69319c100debd14cbcd7faac5534aff161cd7513fa17f2fe1e0f4983abb72d9998072f5347596f6308243c93ffbecf329ee08b3b26279e7b69464d729d882f3bd0541c223f93ce88060e4db46691a802ae402599a6d140fad9990a0b2e7c804574a144b1a73629d6600151bfbeed48bad6e4d278a533664f1b530cec0288b304f341f25f645c052988a7567c698b747489ac23622caee736882cc34cdfe78500fafb706d6cb4eaf01cacc4a0c626456eee0e79ba4f01f0487679a5d61323e6603c44e1c9c7bb9053fbdaeb784667273dc9b0c5d615ec6ea0a3957a1eaf45a8fa1b14b8560248471ae26f004cdb85889b81f71cfb995268374f617b1d4cbd0c2f5ac6eb49a528f5374ce34b4b4cb8e3e4f0474fec475fe021bb89fc770472e307c8d1a14a6c13317528f58cdbe5e46fc56558c88cb5850c68783d1979b999a6b82be9614cdaaed4fd280f7244ac8e6061748650237eb135e3fbddd0771dab8daa9d36c57f642b2156a815cea6e0184c28839bf3b2208e07386332b8f3074b61f20583b37e76bb0e562097bb0f7abe18cb680f13915778df3e0bdaaa62287c46755e11fcd25b8e0e17fb2f52b8bc70301f7c8cee682da0fc026c27d9289d8c2c35021f37c0ece7ccc1d28ca23fc73f44b53753c25d827b02e3fa69e1c788c83df10f259d3b82554c30562308dc4b466b5059fbd870607722e04694e1b7ca1b8bc2c7a903117228e09c3442167a4bd6de7e22ca26a0fd2a86f60bdaff5c9e877531f1c91e42362ecce70355a4781291796e0d9e2a97b67c6aff851a3bec214a8e32280c0cfe5250c19d976b81262c7933594e7292709e07c8e65c6718a0a485f9d9a300a66e0f400de2bbe68a35bbcdacff68024abf8757194f65f1a97a5e1da1e43fb2ef4b0b9fe10f6cafc6a8a1c67df0d280cee9961526679c6e1a4887a9e9f91f7431432515f0e54c598f1103d07ee4c583ab93a3ac88d7b1052a81354cc5b4c0b14e85ae47875c03cde79815d6470319d497dd044336e824df68b4b88a34380739b326a987949b8b40d64b42fd4cb7ad3287b9ea798bc45d296fd8b3d047565bda5945355b774f8d0b45b7ee1f7a79c14153521372716715da1839ae32370ac31483ee6c9d7e72c0e74335c3c5b53ef2c7af343e94cf608c8d6443cdbb8b9472c5f43ce00d974d5e85571761b9e6103935079640ca88010f1278ddd328989e1029cc47a9833f15d9a7b26569986aea10f2ecfdbdef71b97cb86d8eb89ec565d1195cb6d2c8dc4244e2cd8f5ebdd3173cf83fa4c007f8693c86298032488ea9ea43dd99887b125e770eb2c6d6e80b5e7f7f97aff45b09fcc31cc0acbc917b0c2b8af31fbed50320fd7fac1a9971655940c4636f13a58fea8ebcb0eed387d85c96dd431e880299677fefeee362c1459c471acb0aaf88c5a06635b30eb789629ad99a04e347e88176e3bfd22c58f3ffc3e34a4276e6215dd3776633d3440a447c98f9023039e04443e3b809df68e2f77e6e956206596f7168dca2aecc0df1c6c454800331897ac515838559bf8a391be5804b3654a412edddd2404d1122fd7cadb94c4679cf3166cc43259cc4a4b1a6bb5846dac96220893ae0c90450fcdeda6cb33f35231c8ad6851f21307010220cd3040bb103333db8515c80cefed9ecfffb2339e691f581a59fd4cdac45f975a1dd2c7cb46ba151517ec58fbf674cc0c1be6f25dda6f0024db5d34d427c6a5980e31e664a8a76d8246912a6ea0a284b55a50c300f7f0f04b4ec9a556562b55178baed55c6e933be7a35c59a28668d5cba6510785de020a06e0209e546b6df367e282e852db89fc0c0328c1e3107691ea8c07521cff0ce6d8d51915efe49b98b1d5e5120d6168360c869235c6cc269ad2afea821cc0b8dfdfb0cb9b2fde1b94ab96406ec49edab153f224ee36e1d8fd19f77cfd9906ba02b527ae928082b20ad673def1c9e59ec30987ca66b6f3af6ebcc79dfdc354756d0934a2223fec826a21dcd24526363b7ebeb630283750e3babb67f9908389100ca8b16d6b39820a8bffd39302ad0375c8d82a4a25d9b7f7e9203c206e8b45dfed0673b1687f518ffa7bad2a15c139b9671cbba7e30cbfb1b3fcf61fc6b2d1d43431a694be02648c80b62929d4bd4cf87077df162b3e597bb340b62febaef5f54460ce1348850ff5e98bb39e4b818524b2a9d211eca9203484a4299a32194ec9d92f1bdb22828da88de77f984e890e3a64e581c1e523dd1c181d7a43b944f6e292cc84849023fdf93bf496219733c6b8443ae61326cb1b57b2be5830e0bcf81d63c9c22d2110fb7018f9582b20250869d0dfec9d11cfb5c356529f036f15cc84a20848c24b04ad81dee6a2b0f31d29eb6d8497ffcc0f00cc9fd76725d3783fcde8d016ef86c42ff37478146cadf5cecb3fea85d6713d4cb1e156db67576a4af78b349d5da4f224031254d6c18d1a2168e781b47f42ae8e1f7da146e11e67f30166cf6eadbaeb0dc2d1812d37dad6e505b0b9476ea0adf0025b80685dc83ddca512c9742bf1f09df1d6d1127dfb31690a0b5c4d270f3ef9dc010471a5fc26f186488e0607e6146fc5cd93d510fedac0bb4b1fc1464ac325115ee7384299457afe85b3ae27173b4e3334a3cb4f9f28d731c93529dd27178bd2c5e2459da77535d0bf255a846892390ebf94404082bc46f52a66f1831032878d5ba401ab471f31ee41a6f9028df66b4e742c37b211d17e0391299a7d89172a47538ed125ccb3d608ca1d4f322eab2b94773517d5e97253f021daf40525679c2d0c6cf41205b4b0d08166981856f4ef57885535cc303d090d0113fe031397a193bfdaf1d384e2908f721c23d7bf2f30f94059738c0754a371c01d0096e40acfc77e387abdba64e7f2ad6227b2a823b87c022f136b0bccb3a47e3d149a05a9e8861213f18109411156107e0eb5a660cdf457af2f866735df58a20435ea13a6c523c2c4b29bc3d0aff4edf2b47f48ae4fa6c787110cffe63dea7564cad96571b70273ead3b7fe941d1c9297497163370d745d7980911f2d9ae77a9237472e88c7beb3e82f7259d1851f24464214069ddb1575da3c4f34565996d4c367df256b12846bee70f1f608b310cf15ae2ba08611653be9af6858936c1b43b03176fe4903dd52d065f892e290b6b9e408161621d8b527659715370e1e80b06d04aae80bb746a92759a5e1fdc2ac1549d54907c0198079628ae5f1adcdfe13091bf0e7bffbcfd0a77f470547228b42d70c865a14fe444092a528b3893026dc333899eff4d599d3dd966bd655c33fd91b9bb88c2aacfadbe8d47f9c2ba9f9d8c4fd506335804a959e904dee5a37462711b1efd6206896a4effb8d72a8d65f", 0x1000}, {&(0x7f0000001c40)="552d39b1ab2730e5da49dc8b50b3ea90bbc903628dd38668cee8679f2978e0bf58b05d140e79ce1e7cb711b3e27681991d5c9e4d945188f92d4c1a8cd03fe58c8cd72caf39fdad1dd695af54de4a82ea7f1b749e4727373d1019ce397c46f9f3", 0x60}, {&(0x7f0000001cc0)="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", 0x1000}], 0x5, &(0x7f0000002d40)=[{0xe0, 0x19e, 0x73, "d0e2ff792b0916956c16760d506c43f1adda829ea3425093f028dbeb596c0f980f3f49b52888a22c5a6207a5b2b22048b01ce9ad4dd4327bec11b4192fdbac7eb97b7b9b358f817826fc70aa146863f25cb0549132632e17ddc0bc7d1f359dd58b909e67c0e64a2ad542cfb41f66362c40ddd780034808c99011ff2c814c745ed07e0119a61f0ac298d7250b8d36710d154fd05cb58f080601585e99c5be17c54593d192abf159d5698537ba03a415fffd648cd9906651a993d7d7f26ee81b62af69f2cda31469ea2a8e339a"}, {0xd8, 0x105, 0x7, "4f603e7878b9d6b0bb4a0f9758fc8128bde11b5cd230a8de3e43653728b3ef825dcc0dc7129b25207184c5d3371dea94893d4b43ec948ee5177126e077dd422467da57b7447be183761958fe2dde5856ed340b8ae46398468d23cd665557fcd445241c9c174609d7c6a204deed31e84a533590f441534fdc6a6cf484a1d6b5ce6b83cf0022b225d2328d7fe95569d287f593ac2790dd4476bf6db9c187fa191a1460e50f7dce327e6051070ea7d1becd030686aba26a87ba94313b0c4f7007b61794610e4243a699"}], 0x1b8}, 0x2}, {{&(0x7f0000002f80)=@hci={0x1f, r1, 0x3}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003000)="c8d0e912519c831bc56ab282feb75d29d9b25f871b11383d13bc46d777c92ab68c3b55ab204a08d2c03c39857842db33bae2c2025f9e4e4ef48e6f217bf275e5cfa918da3f14790ac85a389e16757326739eda5243deeb426fa4dc3e8994ea0c8a516746d8a041bf8ffb77031feadd92021963a4f0af168c9de5fce42f4ce5f5120cff2de7b531b88b0b486edfb2c9e98a3332495c027d09543d226f373cd7841a02bee400f0e67730029215233b596cf30d14d88883d4037b37b086577df80b3d23a1bc40ba47172381e49fa90123f8551e92ff7ef3975fbb99636712ebb687eaa597388fbb5d7fed570efc933279295415", 0xf2}, {&(0x7f0000003100)="8bf6aa2609c4d969aa83e6848b428ca94b55ab162d1cc0d45d8aac72cb19f2dbe2ad834847b627e1cf365f427fd16a4ab3e85d49a0f2b8e58c18fa1242ca5eb122a2676c86fa504bbed5adc665d41cd7c9248509f7338421785601be5f0f6a84d3ec50fc36435300c5de66f317b2443d6e6c1fdd610b343efd8b44c053a0c7845119fb9540", 0x85}, {&(0x7f00000031c0)}, {&(0x7f0000003200)="142ad744bf4d8246357c233f4a677599e5946acc3aaec8ccdeac7dcc34b3e9e6d31fbc70949fef11983954949617b4b4c63f69993cb7346159b479ac6e226837c44afa49e31267389bc2c5d453bed350071269c6d8ddd28e21fa4786a387ef55e19f72c8907334ebae9704cf5c978d8d3cb8111a0790dd10a4bf899c7b7c88e2fbdc0ad036ac1bd4ee9dc831922b327eff9e9fa271b9c824dd958d6dc7e3055b6a40cf1f788684180b02dbe862ed1ea766f99766cb59f62b03e241c881b94ffcd46daf7894a0cc8cf6a71b1a4493dba00907e4492eb32b313b", 0xd9}, {&(0x7f0000003300)="31f76b1fd2a872610607efb2bbafb9420b5eeeb718529fcd5575ac80db233882fd69b4188016fec1128d24da37cfc52f04eeeafdbcd72d37e30e9b76d5a49e9e32c04c4443fd6eaae1b4b99027164a93", 0x50}, {&(0x7f0000003380)="5d84ae71004e7fe25eb57478de2880243f062e8542397e77c45cd0b798964bb56b5128eeeaf9f99e051d98a7f42139b3e55d073f507b09955e9a696927396d71798813e8ceca0d7d8828d1073b0c341ba88ffb9d120aee070e1337d5add7d5e97cef0fb493530bb0970b9f241faf8b3770a2a15ae05db9d0eba5c234376febdb5a7afd3f4e1210e540b26e6aeed41974094dfd31262129d8e38212dfd4fafae2a31111f835038a4af396ba8085c5c7795f2b4b938e94845e425f575473aebca4deebeb9b4d44b48b37f972d69a1242bd3137eabce9813dd3f5", 0xd9}, {&(0x7f0000003480)="1d0e1664c65a4b74b0e4b5f49061321f11edda9cb06290f305000793a46e0828bf1789c20ba45368f27ecd05b6c76b6a4b59200dcc7436f2ae6ebb9fbfc0c0a9b7dcb4c5e592a6f50a9353790d041392ca50da24c995296cae377b40d38241d7f15c96d39879c8d37aff44d6740a17359dda2354459845847d6eba1e15c27c669d53c1e9e2e7f994dac93e5060c28ce343cf400daec6e95998a5bb434b59d07377dd82db3e820b6733bd2f47f1e6ed48d8be5e41bcfaedc5cfc246fb94d7b63dc78561a6b1c25e1739b6ff397da30cae5b5182dcdd7f1ce12ee21e", 0xdb}, {&(0x7f0000003580)="5eec13b1f84679fdcbed05475da83cd7edc51c56b3180f1eba0b13d4c8cd963ad55a398730e9242ace5188427869d7d861965dd75d1238340ac30850b142ea387c4d63a4c87ba5b847d921b82c39cf370d595ab782a894b417b46efa6d80c06580ad75aa48d8261f130447241a3b7ae2f843a62090cc45fb91680897b72db0dcca4297b93ad7e1a0c3614fbdd3f1167720", 0x91}, {&(0x7f0000003640)="a9db1696e872b42eb9d5fd8a55ab7745b381d8f30a45d2fd5019d4893a5b8e1d7801ef106d3bce584003ad317a257a8f84ab5fd6b5d4529244c060e300c594b191673945c15ce33d538ee15b4f1482452fd8cad0e3bb90dc3fcf2465dff24afba00936ac5f702228bd0d4db478b986303affcced34b0353992b56ad8b57e9c9ee868e81a58ab4abe18494dfe0c243407320e920c5d091d24ba087f04a4c32f52fc3936215bf572b11b5bece9b7369157b9", 0xb1}, {&(0x7f0000003700)="2c3fc7939ba4d8a5b901132b1e27a6f04bd56ea5176e98268b8107165b6093804f65f82385a47a333c1bbfb768791011dbfd8585f70f5b48be1651bd8456269070424dbd8b488ee3fc", 0x49}], 0xa, &(0x7f0000003840)=[{0x70, 0x108, 0x7ff, "1fa0e0f79274b47f69fedbf082346f9c68f4a004985280f50fe6b9b48d9c0fd99533f13743e25d93960677ce21d14d07c1c4447554b44e418842640ccdd31843a2bbf2222b8429e101193c5b2813c798f890edefa69a74701054602a4afb54"}], 0x70}, 0x7}, {{&(0x7f00000038c0)=@sco={0x1f, {0x0, 0x7, 0x6, 0x0, 0x2, 0xfbfc}}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003940)="ebf3828c687a05092f3b47e4e29249ef087fd22dcb64204ee035426b4890f9adfc953995ab72eb", 0x27}, {&(0x7f0000003980)="98128713349781412b5b21e6f2d4353792ccb20b72972572de511dcb4d544585eba7d8bb2e6a7e4e8b6339c1f01bde4f8d75a2f0a18ca3df626440feefcee7bddf1ceeafd0bc8b30547993fe0076800a306080f8edfca3814bb5818e8f20af6d79fb977a3b0868971e6dd65d02f5d51d166a4b4c70799f09142eddcec916f2d2d9da12c70f285925ff0e0e864f822ad2045cfeb02c95ef04ea9121dfbfe98f6382c5a4cb069ac0c974ce6b14fd1152eda30832a32772687b55275d7b64d0deccfc5a9abe0cd4945e6a0f927b64264f4aff134b0d719dbf7a8a98609ab1dec10f01e1dded85b36dad5066c9bc08e7647e50ca2a126a13c0eb", 0xf8}, {&(0x7f0000003a80)="0b3344b4bf288c67e99a", 0xa}], 0x3, &(0x7f0000003b00)=[{0xd8, 0x1, 0x378, "120084b6f16195b49c5dadeab52e6a9b745ab27e1d280f35149b5252a920af0ac9c177dc58a887f3c96f208312bcc79f2ad8aeffd4d5165b5adbb89ff37073a7b0f406b8701c0d2ea3d81b3a0c438c9e2094edef56b95b98fd28463aef8112f2dbce89b8fc16905b027c281139d522b3c5808a7b079ab4d4de245fb1e82a97961d35b9ca674ccc9acfdd6626ad34ce559b650683cc4ce872561f093043795718808604bea464509f849a79478ea8a085231d824f340ab5f98b3d6612be339d7d1ca0"}, {0xf0, 0x1ff, 0x9, "966633b2f5807d02230c621766b486e9ab8fdd84a1e0f56c3f70c487db23144c66ae0660c5e5803c6e974c6d8b5f9b9541bc35875013e5333be581abd8b6cb8347521292ab99fa17114ce4c25f4e350a86a3153f43d69a368cb3f9fad241490a240ca842aaa562ef5b4dc14c266ee895804701f459d450b17b84a83f313532139202ff03d80fae06bf4ffe354606cb417484a9ec43ad32e2c73c405d5a1d151b35d78177e1ccb686dcc6c440695fecdf4798a3a3c6e23ecdd7da6753a9660d43fb4bcc1050e896862e2cbc513fe752384dda7892058c822bdbf49321e91d"}, {0xc8, 0x108, 0xfffffffffffffffe, "d9f411ffc227967d11d87e107e103fecd0faada576c669a9e4c080e6f33eeb6f8d2594944ab710930075261d42580242a6ef12fdd730285454c08ceed68e84fe9ee29737ef57793baae112d73f91e1dbd72da42001e9caab27bd215bd79a12f97e48571e6a534163e3e104f154bb9bdbf5ffd2972f0c9e9cd442acfda4c22664619e1e0cbabd7dac152f40ecf76aceee5645e7f1a682754452e9c83a41d0866ff43e96a9c4e82693a9469e5db1c3c5dc71"}, {0x58, 0x119, 0x4, "3f95565392d20602d43775bda329a1f19864de724d7bf09cee6934c1f5a3f27e5b65d5ae417e8a5c5a61d62a5029eea52c8af5da12cc4d503e2f3d0b94e6d8a1d8407b03"}, {0xd8, 0x11f, 0x9, "d0bd6af165d48dba92893e2e3032e6b7a36f2ff96a836618e25f402eb6767e8f5e4c1aeb1f3ee3c0fa9bcd835d7c72cc4526729c7c9abf6f990195d58da5f44427681d1d2c9f2406b5ba3f8b83f0a36d503d514f15795449458a9cbe03dc8b868d43eb2987627ea40a456c31d7ca1693f971d1bdbee75716394cb6f64a2bb1c64ddd9a2f66d42625f930cf0ae35a1b8f05d278a63c86a2b272504217b6018871184e2704c15575e96f608f6b6ee5bcd84af6abdad729551d23a81dcfa99866e8dc1bd9cce2"}], 0x3c0}, 0x100000000}, {{&(0x7f0000003ec0)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f0000004040)=[{&(0x7f0000003f40)="d6feb409f7974b52ab1651", 0xb}, {&(0x7f0000003f80)="bc918c74682c502dc7b4da90b52a110293570a70b2903dd31b4e0b2343407e2b297ebfbd4f103e4ea69c73f0cd2b98cd24f1761d76c9d5897d85aefdd044ebb9c1496d842902428fdf47e3a11a4cfa3400e1ed06d138f504d1d2a99e78702de058b624c15050f9899ddff8cff720b023c9dc50bd9d5c6fb4eb607d3d1f0f26fac00bf445a3c45d727acb2e5bb7adf712efc156ff314cf033d551741464aefa54ed69740b4b0ab8a09ddc6198cd496c5d1551aa0bb4c56df2cf96b4537d6a", 0xbe}], 0x2}, 0x7f}, {{&(0x7f0000004080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x2, 0x1, 0x4, 0x3}}, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004100)="c1ca56c80b3863b665e8aa80a7006f98801a519ed132d81cd91b0b8fc99382a4b81f1daecbaedf8a7ab70110ee6aea577affc05b298213b0a55eb61646810060f47d6078b22fe60a7be63e481c35bb8d26381319bb54e4e25b5d3e4fcf4714221f97d552f1e7bc6a3cbeb4e6994b732f1ff89bb81096dd124eacdc46408f8afad05d7e2615c94707d05ea384db42ac070a81ef841312", 0x96}], 0x1, &(0x7f0000004200)=[{0x10, 0x10e, 0x20}, {0x1010, 0x101, 0x9, "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"}, {0x1010, 0x19a, 0x800, "299767af8fddc907030dfe05eacec3c9c3ee4e921a5a371b4e7aefae409873ac59949957e5e301ac803e3c2184419d1e99a9370effb6b093f6994a8ef788510d2c0056ee8479d65f17fcf0c60d08796cf3fa7964b86914832c8a76a37b022fb392141a5cde6521e645dbe1fd5a6628bbcaccdc4806e8617378ea5081a84548dd1812ea7f7dd571fe6920ec0917092b5598542df6f4b72650173c4ceb08b98f8847688ffa897e531916c3cd146c7845e403375c3703a4e38cf1e99aa748bc0749d8a6a90af6be8d1fac3e74caf884f12347d1ce671370e1277a1d1b7dbfb73a5037de28f0855f8ff4b7cb22c4cd466d0378b9210f1958fc0070d2fecd4705b320e35cfb674afdf262f1bdecc950bc364af8da065a9b263c6bfe37ff5e1eb994851f4732391ea5146e3684778a12a33e49aa0303fdd1c95a31ff17290bc665d4c5565ed7d7b69e50d3560fd707d5022be0583506943464fb63c6082e91bc1f080c606435f8a8b225ec13df8d60600efbfa7a0763aa435d2e4702a6955f5512aec8e5e7d29d53d6c1354fc0ec7ced0e8ec57993290a0b7520a7cfe27d3924afcac37c41f86cc0666eda6b58d891aa2008f383d906f3d7b7c302670e59e99e2164a8a9e55df6f2f9808ef2bd3b8757618935daf34b11fcfbf847ef943246afd4e8591170246df9f366522b7b4fa1f3783ad2205423bbf735dfaf41daec90676f8dd8fdedd9fc7398e944c23ee927160e3ef37b21f9514a06b841018afb8d16c824b0eec609837e386a06efb155e2aca1ae9bb8a2e0e1fafab38318082333902eb616c3eae4518028f2d5ee5b77cb7b217a40f156d8bfa3acf5cad0eff06c139ab75478bfe49571fd6cfe71c50d185f7fe8cbfbaef64f53dfcd7467038ecef9d3bb548f145e498e4509ae863fc81aa0f33147721cf6d2530469b7cf994fe3043f1cbac5cf82ad83e1d437a3bfa98a429e1cbebdf6a6b0d5d5ea9b65e1fb5494dad49b079d36e459f99e09dd480bb34fc7dd2e75862e64df536cf879423fe3cca03fa147c573c9e76dfa6167db9d4a4fdb2a80ae3e66182420447e8e7866575b8200823baf4ead394a4ef5720fee5808ac54900f5a24dca05625db2e5de532e31d57179a252cef0fd725647f7655f41208ec6c81bd2d1cf36060e4240a2e159ae7f1e57ae093654189ef6a4f3bcdf07afe322fd0e4fafda97c2963a7ed29bfd12f415e9cecbd22bc960fe687bcb9402849e4af2f7e1a7fbbae686a3571242cd2f30508122ee815f5674e04f8de8da071381c655892113012e97608c6b04a8f8075b888a64af4ac71a3d7c0c6a7a124e6302075f0cb63b6127e449b40d25066aa4aaa7d22f3ee4e63fbc2fe7bf2425c628fd44ea36b4879418741a0af73a761c6fd90c2164823813ba089bbb866be2df25b65b83570cf7e3e0714ca44e415c1fa199ea7c2a6aa277f92fbafd6660911786476835b41a22665fd4cb504ccf88d796d54fe766d5117d620e517996ae43d946d53320be63728eb071e14f8b2bc05c9fa61fddca52a270f59b28b5f73ac228dd5ba11399e9b8a9a213831453bcb346007d6301caae06d9693c0eba2911540cd1023bd7f953e072974d71070834ad0084cf9d275380198b825b5581c8a54d1cd808fbdaaf210e310a8ea660d1b121ecf284fdf503ce3915905be65643e7bc6b0fab5a9de7e099859666da8afb713b4be9d849834d461d5b37e7db6614eebb0e69215a62b1843422e316f290109c13c301ee3636301b4d7bf4b36c8df788d4854f84503df0c1a7786a45859550749c36d0f162b88b71e535f123fb889ee6f575f16d75c9d685680fd6a2e6091d1ba9eeb4cff7e219226fc2003062afe0f7f4855569cca85a4d2306b42195f59d94eb1ddd30e9bf77eaf1e96e56985f096fc0ce0f37b103c43be4e4853d74004c6cb07a48e57f6c0884bd5d4e917ab403494d4e0b597e68a418781c3bb6eef4888c3f85e2527bde3ac854ddf4ed95787c6775cd8f5b87a8fa354f4f8180ada624ba0efb9bf650a9d3d58516cff1339a1da0c8c1c01571fc44a3a8c0d826965538dfd4cf5f25851969ca1c62e684df56469f73cfda24cb4164f541d841ce8b227857abda4eb9a28d4142e38a97c3667088faa32744d843bf67432c7c03554fd782a070dbd0d80eb4dd3b98c1a5e641f00f62c30f38d8406f7ec6d31d1a4ae808ada5519a20a93f9508cb7ba7bbf68a953d42d1d2dc09ba2ea6a0b688361a4b69da5714645e519b212a9260dd0f5fed1c51806410c438c430cc6fded26aab0ae6a0658f7257f9a3db6e66a3de14303ada70ed8446b1b12b33763aeb0d3219f1b7739c10d4235b40d53db595da2a9d2085a2dc55766b15732a41ad57055fd62d20a44cb40573af29520baca644eaba46a4d0f6d2dc474d09fa839c7f273a53059756d0e6d94f23274caa4b8d020ce6e0bf768cdcb5c18b0d8e7d4a4ca3b0679be78af390088f775c2ec18e70c433a74053d7b56483d33a8451ae4f73ee194e344831aad795ac32dd478d9068bcc7f9bb83bf3f0b80872b75f69576c13f3880614d614aaeace7826b9da58c221b04f5a10ce758b3bacb8b0bf1293cee6ebeae96ab214105d3b1124fea49e42cbb3ba2a842f2bedc53f8ae8f8bf2d20acb2284e53d90fdc7450226e14fb2b1a5d0066633a9cda5eb80efddb37a60d6668a70fa4957f62acc4916b9a33455e60ceb4d94b9d2af7811664deff39b1260bc49fbb082ce1a8dea32b744d4eb154396b56bf8353680750ac33d34a2fd8de0913b826eca831191612bc1b6a9128f30f9cdc8a50718d0942ef222bd8bcb551267c8c8ebeb694bb612bf184d693856d228318145e0184f00c12f541710566400de0254d14d750de6b1008a33d45837236643ef5ce851f90a7ca7bb1e3f11fb366130e35e4ee463940e6ab61c44dfb0b1d9a7c407e6b7dcd50a88d1b2c3d082f76463d9802829549332f2647e085d440cb78622252f1f95d4785aabf4d1a73d665020007b7a2ae3739aad2bf7636cb79b93b0a16474f49053fd001d5286501685ceb01afe6ed14f2f400c2a2f72cc45ec7e22710b9f869ac7fda852d0d849e51c6e4305890e9439b3ec6fc7d9012e2d833dcba9e8ccd45e8e9eae6b7b85915ae425f16066ded59c0fe762bce100015431bea56bbd393b60a5d822dcecfa1f5d6a4e2bd7ca5c7aa4e178424d6392c980eafc8255e9618e35a13c7dd48b67bae5ade77817be668455030644ce8d792bf31a55b8cc9b862e6bd0c2f84d943e67f4a65a9096e4e44f22dfd3bbcad25ad96d78386e27c41dc5614059cff5c3aac229fd559a1f6fef61ab7cdd9a003dd1955ef3cb981b29e40feec927063cf8dfb6acc7fad0d4566d60ca7d6a149d894c6f4796232819bc0f3959ff0411d8a1ee08e378dadc3102b1d64f4ef0d49288e03bec38a0c3b5cbfb563a02da0b873610abf9344b3cc117a6c0d7a0abbebaa2bb123e01c7a9e5adcbf1531617d51e575503f0384e50408f166dd215c3a0c55ccb3842f0c43c579400ac8b7790c730706b70d7cabc3fafb5153f563ceeeedc802140055a558bb091acfbe2b657c622410eb52a4d34f832d8b77c1c2fd3e3c2a9768d0e7c5343704ce4f6f95fc64379717af70c8445d817872ea7bfdcfc84bee6b6bda8ee7423459dfdb4d341d20679569dbffbc541015a133d597b73ff620d5f0bf194423ee6dfff783e727c9c21b1208445963d06106958aee1e69fc9a14a114106ea030bda2dbcb8566b47151532cc9b4795b8d71676689062dd6869ba3e1d71aebacd209ed417ba9ebb49d7d2876659632340ac8a53ddf55ff96cf54e898f9364b8b0ba7d51f0274c954ffb57b39c59f8888e31d8156fc8bf64edc343cc81c41c9f93e8ffc4c583b6b1df25e0f35bace1ce11b0df2ac6755fcbcb73cae6b33ca15d55ed3d3b3f4baff753d541cfa4ca065c639d6b14cf35d6bfcf261faf336f3c386808ded10fbd15fabace4f6f484ad171247dc3ba5f228106d0b273348982df38cb39b19550b28f4d980fd961a9060427e70a5bfd9218a2a65b942f6a1c102eaae85796facb9172faa7e1d3fd7519e19f7bca46a53673dd3188b16abf2a4c875ffbe5c2bbff770ab2a9981745887945bd34a3a2cf01fbdb364f02efe79da5f8cfde270eda942e01a327285f8dd8ef9bac00574ffec389660b88d3d80068fbb866fed8c7a437ddd429207332375936302ca3818ed3cf60f1c9ff6488d0fffb918ebbb64b94149922be690f9be5ba8aa7957a602a0276abc305b2b3b869e387991a6ee566ab262cbf52a5d70b01076f35d5a882be44e1f01340a3028fe47ac6f818240d8308e0c088ecc7a4446704375f6486c8596de76d9f3bce6b939c2a808dd23560d567cb0badf897a7f2f39ffa5a99e4fae966aa8018cc3c86dc5992f90b6e7d72caed9a9e0b58fe21b66078c14a6bdfd08a7fa247bd92de9ba48d6402186df2cf3a938a3d7d2d07dc2adc2a11491b95c40d49da9736e7bf2e46fdfc3612242167e940ccc6df2d08457c36854da1ce00df711217fda975a29935be89ca73eddaf7273f77020bd2a7ba94f894ae91e57d0f42104329b473f2c1cd4388601043387daf4b8c25dc38ef1497557c37815a65c23cb43487668b18233db967593564c6094441cd15570cdd854b1eb356bad9c6e94944a076161c57e4509a947c17e69015e4be7c3e85633c0ab62c3e734f8649fc22e2d1a02576b01b60c62b20d6e35d769d1ee19e2f6e51af6eff490c5eaf93148babdd2ad7797c529eb6204147b087123618a24a876c917e46812399556f0be8979a23714dda7f0dc0e9dfa509b264bea19a3cc84268612dfafcc845734cdbc68999c61b344def7b00a45ef94a045547695e0c69e4cee7889ffff4006e093e7d558b596f6d3ab137bf8856a3f88a15a7ca3cb38af851577686bac86b69ffa8219c6db3444384940269bf452c0e8ddb4fbb41975ddc5e1c0a0745ccce1d54f6db3cb147676c1b3bcf0c24fb65075f7164acc0e2362a9db377a10698f30535cc060807cb2310dfe0b595a40a7bcdb9b28e9d711284af369f8a1bb9d0d4a8bb781ee9b41f6df884c7c4ebb617dff1fb3c9580378c045e9e764bf12b40d2b64153778913cab4a3d2120a094276d226cd8509cfb1c88c7d7d40775396155616e03335672818c59b3a6f2162c1581bb1797c9ee1785aac6e157ec374c5212f09808abe1c98f7cbf400d3f4ba258d5627a8adb12e44957403cbf5d26e909eb9933f0f3eae03ee15262145c3e222e8ff6eeb7c096ae01954b85b5c77983859a11fc86aa0177c84612dc6ed0bf3fabcd0d96cbee2c5169b20714b50bede83d08e479441d88995e8de359b8c62f7f38beef23ecce02c097816847460b80581729d33083ef276b4be8babcd26f9262ad11cd0d02ce3458f19c705b88a75be3a52ac513ab904aee0aac70892085cdd9419e117d139276a75d9eba6d7996f1a57fd992a67cd7959b4cef29f76c1b405588476378c5a97b9462911c171675d28cca931bbfda6ce4e6037eea8d551a101f8122d3ca70627f3d356ae38d735254d913497a20b759f81c32880131e30ef89afe60812570717dd0e37172a55a032e40331dbf5babd395d0b6f6ced702e84889ee1e66a1a514557505e7571b7af9c4505cc3e6e7ac413938e51673f37692d6167dd535374871c3a5434c6d98ef4e7f8cc30301da523387c8b31cf7e60c661632d8d1a929cdbab3695ffcd9d2d141c52fc03e9e830bc126b7568e55145ac20405c356b2"}], 0x2030}, 0x7}], 0x7, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:36:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000200)="b63db85e1e8d71b7020000000000000000000000006aed69d2bc9bc2feffffffffffffffe23c9b160096aa1fae1a00000000aa08fa225709103765dc90705d44bce20cdd1ab8a8f094b7d22ee8264fbcb6e932f0ca291b4c197e00adcd27300fd90e911fe6201a", 0xffc9) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000000)={0x3, 0x14, [0x100, 0x8, 0x6, 0x3, 0x0]}) 01:36:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000004c003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 435.404905] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 435.404905] program syz-executor2 not setting count and/or reply_len properly 01:36:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000000d003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x40c00, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000140)) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000540)={0x5, 0x80, [{0x9, 0x0, 0x5}, {0xffffffffffffff80, 0x0, 0x7fff}, {0x1, 0x0, 0x400}, {0xfffffffffffff800, 0x0, 0x100000000000000}, {0x7f, 0x0, 0x101}]}) ppoll(&(0x7f0000000000)=[{r0, 0x8000}, {r1, 0xa4}, {r0, 0x1020}, {r1, 0x8002}, {r0, 0x2044}], 0x5, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x3}, 0x8) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f00000005c0)="2e1063f4bfb72c5643a170274da2130adcd345899fd453381e8c775b3ab6d7dca0f479860cf6fa7bb6bd6effc295498bc5899780581adf57c05041a2f147412a17794132e89546602fed87f50c861aa679aac2706b2fffd379e432ef8c796b6a74c04ad9bbb3c69e8e6d7e1b95b7f027c27e54763df99a1b4633b24ea27ed692da54d0174c3e49c11dc2065b5fee826bc5fb678c8feab9e6057faba960066fde04d6f8a8f30ba28a40d87c654b9745c509988762eac9156404902ed12f440c23bcf097a3ccb21afdcc5439bc40e5ec0e50626a38234d3892d6a9b78a47e5dddbd8d848dd89ab93ddae61f91dc594", 0xee) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000940)={&(0x7f00000006c0), 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x18c, r3, 0x18, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb200000000000000}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa2c0000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd19c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd96}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) [ 435.591863] audit: type=1804 audit(1545701817.684:93): pid=22254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/532/bus" dev="sda1" ino=16561 res=1 01:36:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x8, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 435.683421] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 435.683421] program syz-executor2 not setting count and/or reply_len properly 01:36:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) readahead(r0, 0x2, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffef) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x908) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:36:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0xfeaf, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000200000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xf0ffffff00000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:58 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x63c, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2c02, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000100)={0x1, 0x0, {0x40, 0x1ff, 0x9, 0x9}}) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 01:36:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001680)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f00000015c0)={0x53, 0xfffffffffffffffb, 0xf8, 0x5, @scatter={0x2, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000280)=""/242, 0xf2}, {&(0x7f00000003c0)=""/4096, 0x1000}]}, &(0x7f0000001400)="4eaf40d1e0bcae429bbe4014f8c711f6f5273cc2cfe7d30bcb13615bde9ed38cdb245d40d208532e8c6df57811eb3e60d35ba3c5127f6cd9083c7668d595601745066a7eec41afd403570ffa50179040238e8f97e4b8c5d2d4f161b5788a9e09d9677c7e84b3e0fa62735a0775e6137850b521f282bda50c913ea157c09315d8bf2d8a272655634472f254c0daa606962a2057b28951d3f4b4ca2e9d9882e4b0a7ce924fbb98da26d9942bd0a9843308d11bafaba778d061d309b115a2603a06db902f3d54ffcb149b09000000000000001e790eb5153f3507e863bda6ffa1214293adccf5987c245f4f111adfcba18c80417ca5395732cd", &(0x7f0000001500)=""/116, 0x9c02, 0x1, 0x1, &(0x7f0000001580)}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000001640)={0x7, 0x8}) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/135, 0x87}], 0x1) 01:36:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1) [ 436.445450] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 436.445450] program syz-executor2 not setting count and/or reply_len properly 01:36:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:36:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x6, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x400000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'veth0\x00', 0x400}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000100)={0x2, 0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000001c0)={0x3, 0x9, 0x3}) [ 436.540007] audit: type=1804 audit(1545701818.634:94): pid=22310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/533/bus" dev="sda1" ino=17679 res=1 01:36:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200000d0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xaffe, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000080)=""/46) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) [ 436.782180] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 436.782180] program syz-executor2 not setting count and/or reply_len properly 01:36:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8906000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="094bdda8811cc34fb249fa41af", 0xd, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) fcntl$setflags(r0, 0x2, 0x1) keyctl$unlink(0x9, r1, r2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) 01:36:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000060000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 437.089219] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 437.089219] program syz-executor2 not setting count and/or reply_len properly 01:36:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1) 01:36:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020005000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x88200000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x400000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x400000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x81) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x64, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r3}, @enter_looper, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x20, 0x10, &(0x7f00000000c0)=[@fda={0x66646185, 0x8, 0x2, 0x1e}], &(0x7f0000000100)=[0x40, 0x18]}, 0x5}}, @increfs={0x40046304, 0x4}], 0xde, 0x0, &(0x7f00000001c0)="a842da662fd2994b4d7bce4125fe473b2171251036852eb5d4061b8873a5d93b333b3715f5f93878442ba112df9a2fca03a1dbdcde6b0664dafaa93ae8d381295e7f31095eeffaa395ae581cf453d33e867c25bfa74d07b3320f1f5fb6731815a3b2fa330921b9a5883e5a96c05f6e85ae31e43ceebe7de0271cfe43d570fe22cf84220b8302856a0327ae2a59e102f661ac385b35da04a3509a7b02e04da8c6d12539f4b2c3b992391395d7c53a8b745f69e35e29dd9c8787bd0807b74820ca5bdef4cfb056b0f0a61ca096f147ce6f6f4dad970e8ad528c74d8b89d66e"}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) [ 437.363364] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 437.363364] program syz-executor2 not setting count and/or reply_len properly 01:36:59 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @multicast1}, &(0x7f0000000080)=0xc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1ff, 0x101102) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000100)={0x40}) 01:36:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x60000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:36:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200fffffffb003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:36:59 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x7, 0x44000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{}, {}, {}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$unix(r3, &(0x7f0000000180)="3fe2d40f93cd800e334129b3c74f5e001f336ef6909025a52cc8ec34e14d52edf254fe4b3c038f7e8c36817ccb007d20e33318ca3ccaa70fd0f3f1ca0efaf72d7d97a3f184c42844a75e38e9cf865a32e2635314708c9222279a9f52e06f2ab00afe93c6187d3748a3cbfe788a296fa7df4708a3cf87f91476040b5444e23092805cae19b50ed7ef63e215743258cce921460422e842c7a663ec8fe27d4a66f8c4782d5caada37a7b4d74e113e0357d0474f567a75a924", 0xb7, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:36:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:36:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x12) [ 437.579262] audit: type=1804 audit(1545701819.674:95): pid=22386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor5" name="/root/syzkaller-testdir834510563/syzkaller.1paUFb/534/bus" dev="sda1" ino=17521 res=1 01:37:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1) 01:37:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x904f, 0x9e0, 0x3, 0x6, 0xcf78}, &(0x7f0000000200)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x800e0000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000003003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000080)) 01:37:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x300000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x4000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fremovexattr(r2, &(0x7f0000000100)=@known='trusted.overlay.opaque\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x204800, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) connect$packet(r3, &(0x7f0000000400)={0x11, 0x0, r4, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r5 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000002c0)={@local, @local, r6}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000440)={'bond_slave_1\x00', 0x800}) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000480)={0x0, 0x7, 0x0, [{0x3, 0x3, 0x4, 0x401, 0xa, 0x82, 0x5c100000000000}, {0xc0000000, 0x0, 0x81, 0x0, 0xfffffffffffffff7, 0x4, 0x20}, {0x0, 0x3, 0x6dc, 0x1000, 0x1, 0x73, 0x9}, {0xe2de, 0xfce8, 0x5, 0x7, 0x2, 0x80, 0x2}, {0x2, 0xc28d, 0x400, 0x2, 0xfffffffffffffff7, 0x6bf, 0x100}, {0x5, 0x5, 0x7, 0x2, 0x7, 0x5, 0xffffffffffffffff}, {0xa4, 0xfffffffffffffffc, 0xfffffffffffffbff, 0xd7c2, 0x68ed, 0x464a, 0xff}]}) connect$packet(r3, &(0x7f0000000680)={0x11, 0x6, r4, 0x1, 0x6, 0x6, @remote}, 0x14) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @multicast1}, &(0x7f00000000c0)=0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xf, 0x40) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000d000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x1000000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 438.598611] sg_write: 2 callbacks suppressed [ 438.598627] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 438.598627] program syz-executor2 not setting count and/or reply_len properly 01:37:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setxattr$security_capability(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)=@v1={0x1000000, [{0x3b8577e6, 0x7}]}, 0xc, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x400, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000300)=""/109) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r3 = request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r3, r4) accept$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000009c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)=@ipmr_delroute={0x3c, 0x19, 0x100, 0x70bd2b, 0x25dfdbfc, {0x80, 0x20, 0xa0, 0x7, 0xfc, 0x0, 0xfe, 0xa, 0x200}, [@RTA_DST={0x8, 0x1, @rand_addr=0x5}, @RTA_FLOW={0x8, 0xb, 0x4}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_OIF={0x8, 0x4, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc4) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) r7 = accept(r0, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000000)=0x80) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 01:37:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) 01:37:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400) ioctl$NBD_DO_IT(r1, 0xab03) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:37:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xe803, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000004003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x6800000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 439.352437] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 439.352437] program syz-executor2 not setting count and/or reply_len properly 01:37:01 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x2, 0x12, 0xe, 0x9, 0x0, 0x4, 0x15f, 0x1}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000001c0)=0xd299, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/137, &(0x7f0000000000)=0x89) 01:37:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3580, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000060003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xfeaf, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 439.633545] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 439.633545] program syz-executor2 not setting count and/or reply_len properly 01:37:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) 01:37:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x4002000000000003, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x101, @remote, 0x3}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x0, @empty, 0x3}, @in={0x2, 0x4e21, @rand_addr=0x2}, @in6={0xa, 0x4e23, 0x4, @empty, 0x1}], 0xc4) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) flock(r1, 0x1) 01:37:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x600, 0x0) r2 = getuid() getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x200000, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0xb4f}}, {@default_permissions='default_permissions'}], [{@measure='measure'}, {@fowner_gt={'fowner>', r4}}, {@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'selinux'}}, {@uid_gt={'uid>', r5}}, {@fsname={'fsname', 0x3d, '#em0'}}, {@dont_appraise='dont_appraise'}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, 0x0) 01:37:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020060000000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x689, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 440.328565] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 440.328565] program syz-executor2 not setting count and/or reply_len properly 01:37:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x5, 0x181000) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x88000, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xc00201) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) getsockopt$packet_buf(r1, 0x107, 0x7, &(0x7f0000000180)=""/254, &(0x7f0000000280)=0xfe) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000140)={0x5, 0x50004, "5a93fde00a17b6d6e97e2e8edc4b804998f120201ca30e15", {0x81, 0x4}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) ioctl(r3, 0x7, &(0x7f00000002c0)="bc643054b259b19b9bf8c26403bea0829f1bca3e5cb000e3bd67668b0a34d7f9898e8faa6977d2196a5c0a235f2d2fa9f0bc8f98cb006a03a0a346aaf00977a4fa0dbd0fb82a2903bff869be84e9a0fd1c43434e3cf55dcb396a585c344df8b5085355173d576c06aef8c8378626ce8d4b31595af57b22a05bf2ac9e4093dccdb3a369f441061c3b3a075e7f649576d46903cc39b657f77b40354e00a199276eb8f537048f3ba3616dfd5469372d1b20d16853d8202d31288be04b5987a3f0871643843d63e42e5e6535aa7e2fa87e6c0d6e6f46e7e3fde2154ec3a6f0a420dae3fe7beea5b4bf179bb647f88d4c9df059fa034bfb92c942a301") 01:37:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x5, 0x800) write$P9_RMKNOD(r1, &(0x7f0000000180)={0x14, 0x13, 0x1, {0x8, 0x3, 0x7}}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000480000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8035000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 440.643242] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 440.643242] program syz-executor2 not setting count and/or reply_len properly 01:37:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) 01:37:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000240)) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2080, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:03 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:37:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000683ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x19ff000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x48000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 441.333556] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 441.333556] program syz-executor2 not setting count and/or reply_len properly 01:37:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x259, 0x0) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0x40) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:03 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) waitid(0x0, r4, &(0x7f0000000180), 0x1000000, &(0x7f0000000200)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x1000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000002900003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) listen(r0, 0x1) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x4000}) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) [ 441.666966] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 441.666966] program syz-executor2 not setting count and/or reply_len properly 01:37:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) 01:37:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x6800, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xfffffffffffffff7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0x239, @dev={0xfe, 0x80, [], 0x1b}, 0x7}}}, 0x84) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000003c0)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xb, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000680000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r2 = gettid() setpgid(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, 0x0) 01:37:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 442.318115] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 442.318115] program syz-executor2 not setting count and/or reply_len properly 01:37:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vsock\x00', 0x408000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000740)={0x0, 0x17ae8400, 0x10, 0xdc, 0xffff}, &(0x7f0000000780)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000007c0)={r2, 0x5}, 0x8) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000640)={0x0, 0x0, @ioapic}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) r3 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x2, 0x2000) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000005c0)={0x4, 0xaf2, &(0x7f00000004c0)="dc1521f0c2f1f7e2d4b6303489e6aa21a1cd76c6eb171ad6d96f23cc", &(0x7f0000000500)="7463e337029716b8fcfc4225db92232c53515ab7d7399bab3bef6423f42a981c95493723968b85a99fe93548cc36603319366dc402ddecf374162be16ef812827f2e92a4fc4482a47633100b88bc5725d79981bf0f7093431960e44d6a19d2a62a3f7a61a9e3fceead537da70aa3ce2f1ead6fdb0ee46d8993cf841f154d1de212297141bcff1044e2bcf29c8b9d30a03eeb4309c4", 0x1c, 0x95}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x5800003f, 0x101, 0x9}) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746572001e000000000000000000000000000000000004000000000004900000001c7f39bd19b3ff4e79cad9df17d725ea45b922ae00000000008000007da57b21f79fafef0fb0c6baec142735547ec6eca7109eac27a546f12f66598bdaa259e737299a6dbd2c3c72ef0eb2cb887ec5efb18e3b57304f995673ca97905369d271ecc9ee70e8bff973a571d201d523b000a27125f75adda8aa90f28b25e9600ad2ce733f1626b417010059b1879666edde980000000000000000"], &(0x7f00000001c0)=0xb4) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000440)) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000180), &(0x7f0000000300)=0x4) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000400)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r6}) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000800)={&(0x7f0000ffc000/0x4000)=nil, 0xc6f3, 0x5, 0x2, &(0x7f0000ffe000/0x2000)=nil, 0x87}) 01:37:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xb00000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200007a0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x100000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x7ffffdff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000180)=0x14) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0xffffffffffffffe5) [ 442.626557] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 442.626557] program syz-executor2 not setting count and/or reply_len properly 01:37:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x4200, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x2, 0x781000) io_submit(r1, 0x2, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x100, r0, &(0x7f00000000c0)="a10e0dc662bd00e20ad980743ff0c641018a0c4b1206c82ec806b5d7e98169bee1890826116e906f6847f9a8ac48d173a115341f5c51da5589d53f15d586e7801fabb892", 0x44, 0x5d, 0x0, 0x0, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x798, r0, &(0x7f00000001c0)="c475671953581124fc6555d4a8aad109d1fe55169432e398b819fec3494fbf4f55dee2ef898f19ffc312ea4fb64de86df72509c8a4e7a2a4c20113cb", 0x3c, 0x50, 0x0, 0x2, r3}]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x840, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 01:37:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x5) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 01:37:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000300000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x600000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) [ 443.352645] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 443.352645] program syz-executor2 not setting count and/or reply_len properly 01:37:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xf000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000013ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x4) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x3000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:05 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SMI(r0, 0xaeb7) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x9, 0x7}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0xffffffff, 0x4, 0x401, 0x8, 0x7f}, &(0x7f0000000280)=0x98) syz_open_pts(r0, 0x400) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x20000) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xfffffffc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, 0x0) 01:37:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000700003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 443.822000] sg_write: 1 callbacks suppressed [ 443.822015] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 443.822015] program syz-executor2 not setting count and/or reply_len properly 01:37:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8864, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xffffff7f00000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffff09e22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) r3 = getpgid(0x0) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f00000003c0)=""/4096, 0xffffffffffffff2d) sched_getattr(r3, &(0x7f0000000180), 0x30, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'veth0_to_bond\x00', 0x3}) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x6, 0x1, 0x21, 0x7, 0xfffffffffffffffa}, 0xc) 01:37:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x4) 01:37:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) 01:37:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000603ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 444.273295] veth0_to_bond: mtu less than device minimum [ 444.302944] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 444.302944] program syz-executor2 not setting count and/or reply_len properly 01:37:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0xc7, "e13edb5a9e52536ac0c55e0388ca49a7b8b662b001419b0326ffdcb0c82933378d15ccb2ce823101a122cb7332f3d77b773b480c53b44702d79147c21b8435424dd2866d543d7d8ca1e6472aa3d367ae03b389e74b9a6c37fb404be9c4cc07341ba345f8502698fdf9d707629464b53b32f78305de7f35644a73779aa755f92f56e05c6e36e4d819f76bc784685b21640d29467493a1a6d4d542e0cbe33f0209ab3215f3dfc6083349a4fa7429e1aaf8c3c79ab6ee6922c74875b6c67d45e5d5989837ea790142"}, &(0x7f00000002c0)=0xcf) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in={{0x2, 0x4e20, @multicast1}}, 0x80, 0x9}, &(0x7f0000000300)=0x90) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xb00, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200000000007a3ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffffc, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) modify_ldt$write2(0x11, &(0x7f0000000040)={0x8, 0x20001800, 0x0, 0x20, 0x29b, 0x3f, 0x0, 0x10000, 0x3, 0x89}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) [ 444.692615] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 444.692615] program syz-executor2 not setting count and/or reply_len properly 01:37:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) accept4$unix(r2, 0x0, &(0x7f00000000c0), 0x800) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000002000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 444.972509] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 444.972509] program syz-executor2 not setting count and/or reply_len properly 01:37:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) 01:37:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r1) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x88a8ffff, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x76, 0x1) connect$tipc(r1, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x7ff, 0x1}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80002, 0x0) rt_sigpending(&(0x7f0000000180), 0x8) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000100)={0xb, {0x8, 0x6, 0x375f, 0x8000}}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r5 = dup2(r3, r3) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000140)) 01:37:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000030000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 445.285482] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 445.285482] program syz-executor2 not setting count and/or reply_len properly 01:37:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8906, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:07 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x32, @remote, 0x4e21, 0x2, 'lblc\x00', 0x0, 0xad, 0x2a}, 0x2c) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:07 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xffffffffffffffc0, 0x2000) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x2000) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 01:37:07 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200006c0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x6, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 445.679734] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 445.679734] program syz-executor2 not setting count and/or reply_len properly 01:37:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) 01:37:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) write(0xffffffffffffffff, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x20) 01:37:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) accept$alg(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:37:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x806000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000fbffffff3ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:08 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x12, 0x7, 0x579, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/71, 0x47}], 0x1, &(0x7f00000001c0)}, 0x10000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) 01:37:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xd00000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 446.332899] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 446.332899] program syz-executor2 not setting count and/or reply_len properly 01:37:08 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpeername$tipc(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x10) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r4, 0x2, 0x7fff}, 0xc) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x606000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000600000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x86ddffff, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 446.708688] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 446.708688] program syz-executor2 not setting count and/or reply_len properly 01:37:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0xc00, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008c0}, 0x4010) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x9a, 0x400, 0x9, 'queue1\x00', 0x1eb}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xfeab, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000063ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) 01:37:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xf0ffff, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 447.309018] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 447.309018] program syz-executor2 not setting count and/or reply_len properly 01:37:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x29, &(0x7f0000000000)="ac166e8634e75d45dc781f42513eab95cb2038f9429626") ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x10000008002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200000000006c3ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x1400, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setitimer(0x3, &(0x7f0000000000), &(0x7f0000000080)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) [ 447.643751] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 447.643751] program syz-executor2 not setting count and/or reply_len properly 01:37:09 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchmod(r1, 0x20) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xfffffffffffffffb, 0x208000) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000180)=""/45) fcntl$getflags(r0, 0x408) 01:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8847, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000ae00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x406, r1) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000015c0)='/selinux/member\x00', 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001600)={0x0}, &(0x7f0000001640)=0xc) fstat(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001700)=0x0, &(0x7f0000001740), &(0x7f0000001780)) r8 = getpgid(0x0) fstat(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f0000001a40)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000200)="c5d3e2e4cfc647eb394b9fc69783d5e41c761785db1cbf5e2fb2547b450208856a353836b4c6ed212d12b2ee0fe676ae97b27e61767d368af30dda0ff7597a50e78f320e91f4880d537279b7ec1bd7dd3a5f559c62562b13", 0x58}, {&(0x7f0000000100)="4570945343f45b83226af159f4", 0xd}, {&(0x7f0000000280)="bbd62887931512d19eab9b667fab78d9e5ff401dac4e120ddd60af993b8af2af7d2fef5900331967c6bb968381d99cc8694032cbb11efe5387b4c687f651c035acb88ac4c17b4e9ef8d521fcf1c61e935428e2b08755d653e873b7dd1a19162451a7bb16038f52aff5328a23faec172bd3ed5e658dc6eb6d087c97a0ecf4c6452df40e9c622baf593ca462d1024d2999531534be1ee2f88a6615d9237f0cbff09bab72e03915f7723b333da6d9c46a42a524ab80ec8c93125d318e9f3707eec628588e506c", 0xc5}, {&(0x7f00000003c0)="a62450a071525a7aa8b1efc4f6a60efdd7552c7eb0f0c485988dd8e3052677aab253a59b8ceafe85c84a8264c7886bfdf4cf1e9f963d8efca89ff24bff94de76dcd890de20bd3cf6a5fc681cf4192661b6d83bb76cf7270b7d241e3029da7e24cb02238f941b9989d226b6495de79896e6d8d7e0470ab7b13b5876fde0c0acc79d0dd4965af028575b2aa06dc29e3a33", 0x90}, {&(0x7f0000000480)="277a55823c2979126a28de", 0xb}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="7cdab5bf0054f8e08a1e55732cbe19ad3e927854b44fc85cb5e0b3854f69c4bce7807415e9853f5c0196923e41a09cb4297cecd769e8ac86d4913d5ca95d8d93d7c20e270a73ecd4d4784b2b9a6df046290d8c", 0x53}], 0x7, &(0x7f0000001980)=[@rights={0x38, 0x1, 0x1, [r3, r0, r2, r4, r2, r0, r3, r3, r0]}, @rights={0x18, 0x1, 0x1, [r3, r2]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r1, r2]}, @cred={0x20, 0x1, 0x2, r8, 0x0, r9}], 0xb0, 0x4080}, 0x4001) ioctl$NBD_DISCONNECT(r3, 0xab08) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000600003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:10 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) 01:37:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x88a8ffff00000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:xserver_misc_device_t:s0\x00', 0x2b, 0x2) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) 01:37:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1000000400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) accept$unix(r3, 0x0, &(0x7f0000000080)) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:37:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8848000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000023ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) getgroups(0x9, &(0x7f0000000240)=[0xee01, 0xee00, 0xee01, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00]) setgroups(0x1, &(0x7f0000000280)=[r1]) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x2, 0x4) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'osx.', '/dev/sg#\x00'}, &(0x7f0000000340)='mime_type,}selfeth0\xabGPL!\xcecpusetmd5sumeth0,:eth1bdev\x00', 0x34, 0x2) prctl$PR_GET_TSC(0x19, &(0x7f0000000180)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r5 = fcntl$dupfd(r3, 0x0, r3) sendmmsg$alg(r4, &(0x7f0000002640)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="f37fa47d0c18c1305ec5543b0d63e001466e85380da2529b63aad8820779902e6411f1caef834d47510a478621a9c2fb19e419dd1f4c825ee388f943814423f36212d030aa9c5d8f2315d761d5344f102b83ab9f4f498af7e14328e7933d4660988e17f729f840c8e426e33871f6138aecf7b0", 0x73}], 0x1, &(0x7f0000000480)=[@iv={0x78, 0x117, 0x2, 0x61, "0822cb9304b50fb3b90ecfc460a2e4445be3b91061c7f88b8af39ffee8b55d51e2c7adf55ad46f8a4f216fb4f3cf7de27230949c9e06f523a188b112b4b2c4e86a6e83efa66788ba50ce5f2b2a42453cb80b622886804b95c04cce22c27c35eb8e"}, @iv={0xe0, 0x117, 0x2, 0xc7, "e96ac03d4569c2f3733ca0cf556176addb5e0165237a01cef43b28dae8a4af094accfc75289c6b85dd4065f3832eb24a7a8f79164460deca2e6cff3bbe0585258ae2a3fd67e3d5c0b57d7e033e04fab19400ae071a48ece2a45af2b62aaf0a38f1dd73375ceacda29dd06c3c1815cbe876de9a7525224f22d8fe7e5f1248764da6b43fc857c22dd19dc2ec7903d6ba983911ea5dde18f128784ef357552b40595115011e210398b26770b6776ba99b54ed14d2bbb72f51d5fb4b394f8bade823ee3cb7e7a67dc5"}, @iv={0x20, 0x117, 0x2, 0x5, "4b874aab3c"}], 0x178, 0x1}, {0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="0719e002b68380ecc1da88e76d29eb2288891667eed27455e38b2d627ddbd69d89bbbb4e6199138d769cc2a07978d7b4106a2ad9be3b821085f8321945f8d0e1a69aedc623dd1e6e3f4754a3fc835e6ca56bd132aa8903d2cb666aafdb8d2ab9214e8a4a24047d21f940a07dfe63dd0bcadbee8bf533a9db67ce58041dffc7413aa9b21f1705ddcc9597e2345086f61ec552e8270e75255e9bcc8febf73ae44cf68ecd25babfbc2d4a49ead11919a22e68e3085d44b34e55da", 0xb9}], 0x1, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], 0x148, 0x80}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000880)="93a56a2a36f3c1a9e87206a7d9c300167af86d", 0x13}, {&(0x7f00000008c0)="431b4a3873e0bcd2a462912350854ea23c649a4c377334d76f90443b8cacce6875caada9153fc88f858bd105a1c0b5a1016c543c98a1be12559b06db0ab2edb1ea81969d3a29d2b2c7bffdc11769d219daeb666acb788aefcda0369da8f9003a391a54da1643f7d68395e2b7351a07cb37e318acf3f56d6b57984bde80954964ef8b572d76122cf57cf4a732bb3ea2114fc667c2a88795e9fc44bf206e9eb578ce53b9403495952daaa130a7bdfa37c01d8c126ef17da6946d00d54775109fb2f56016bddc426a1a05ae15ff426af821ce159c52fb6af7ebd38e19686756a23e6d5f93", 0xe3}, {&(0x7f00000009c0)="fc9795ccb6372e30e334254c1384f0951417a4913d4dc7b9b48117c526096c464757c164f385c3484b60d877c526a04138c0efa32ad25df9376dba414167e1ce556928f6866201de94f677ebef0c44e1ceb386c0701efc2f8edb5bc1288186e18b8f2c6f3e3543eebb4af69dcfec7868d1cd60154ecd913aa2f8af2c71449ef4e000eb1c493e121eb9a038d9f7a1c5329026bdbb93069c69df5b0aa793428b6bd5e350e38126cdb321b9b31678d94be91194300f3a7441e89f89a1fff9a63cadf75707a8c440d2b5807aa1680faa2309fa0a", 0xd2}, {&(0x7f0000000ac0)="e33ed2bbaf2f2e2b1ac78a1987b0f9ab7045a0b19f5c3ab23aac1bd7b74572c7eb9c08", 0x23}, {&(0x7f0000000b00)="54fe15be55d1b4533bf59d3edd6e7277c1d14ef6011074db1a00275887609dd23f5905fd228438164e7e93322b4d7b84472bcdb1e6d27d950c96f3530b59247a1aee37eb73cfce097665e687d542b9e233bdcc0fd5679ec1f27e4b740259570629101db5acaad3c71a66da4833224f8444342e2960a48ca6a668ab9219d1ff6641d643cc343a752ff1389e52e0dcde5c4a79a8b7d2cc4f902f58d6ebe1862f6ae5820de18dc116b18fc134c7510ae1c75ee32be4497e2a7f57be8bd8bb650b3b4ab4b3031d9cd9532ed051de14017a740769c41ec79cc4f73e466c39d2f0ba95f64326ee1be07e9fef8059fd459df39348da1e0f35f67020fcd82c058e05a12bb468294cd81053aceca4822a3e19813b4517a79c533ecdf9135b633bf4563cc6310205e38c2fba150cc2be2290477d2ae4ae4a83a3b6f238ec95f3a3d1dd43db9b04080f1c01d82baa0cd85d4b2c2839176de9a1e25ea35c23dfcd3c2a13b018751c789f0b6dfc6a782aac7b58367fa319ae00b3cac34e6505682d93fdb43a14ab4ea17571b766f1992c2bf3dd79aa762c67778405f52a1959c496988a4d96209eb25a760d3cf446169259b480d7fe1a59f1c6efaf4148d621adbe64552d66a2f0e06a0d70d9ab9abd8d027993065ca90b362c1cd4eafceea2fb628b810cb1a6e54b08b9fec787e1417c588af27228938d9808587f419d3a33f51cc2dda0a89a278b6689e4184753a122a5e02748b9b7a38eb4125e6c4163e660e66ac9c8ba8034eb535493aa4676bd542d19bc6ff8a4d6dc250fde963c8339f00090de3f76ac55fe76d59c2a67ece45cda9455713a7e8ed5b123e6d3464af295a9e08fc00a7c382c2b3f7396b2de52c01dabaa9c8b72eac3127aaf8048166b9f8233dbf608befc1fab223802da9ce3989a58e17939814078008748ee4c73878d7f364c02f3c4646452ea53d4ffa07f3f4b6bdb4330cadd6bc130deabfde7c462075c0ed7de272a77a773998308633cfcf6f186a4b1aad71f0acab2fc7f5202681f1b4b926c9d7f4e0361574a1aee27414e42686068fc1f8e02db864e58b7391768391121dd0d169a79961995f32dfb68bc6eccbe68077e526fb0080f989f122dfa60463283036c5691d1ae37c06f34383ffa6c433dc1e9f9091af058a184bc298e000a7704eee8fcca41ef5c362c0492ee462dd1d3bf86740dabcc0d4b63c41062699af69ceee7b7228a343a8033ef75bfe7fa11fc4f93dfc97e7e418fc63ab6fc1202e663bc74f0a79ea96a9555d929c2137b5921ec6d47a34fd92a3bc732d73c6b362555d48648881c89201af78060eacb63743c0b314e053449f730227f4d7b767f8b5ca5e6550acd9dda15751171de60938d7af7d62b2b7136e8e80ecb6990f3a6c0b95df878957b8218ed197e2e5cfd95f5099904f7d20856816473b2bdd9d890fe8007ae7a050f177a946f4992cbe8100f3c37ffdc8a29d7626b15dab9cc129b336159e7e95fdf89b3a9552c15a78e66a2db8e3a987265bbab25626b97c4c0071dea230df1b208e17839e30114b48073320a9187f05449828d9769222055cbe7d66cfa4aecfef1c41360ec856af189b253ae407c9bca80f7759d6694d6e089b0b591313ae7345d28c4b74d1a67d0b881fa8b39999aff8534e6eecf45dab9a052f20577eae31c407a40171f230d6c91dc71a4e3aa386b6eefcf6b0d8d29417a8c6df174375c8d79cbfcd683e39df826130bfd4669f8cfba4de6f1811594a5b9569b4c7717824e63741185cca765c2726ddf42f9d6f800dd6acf8c75a6fe64a9ff89b96dfd57e226dd5521e3b3fe29b41cc0c85d7270abe3bb146259d150efdabfee3767aea74f24ace0c5a811d0ab52b74ddd3978f2b411dc0905acbe4c31f221d33f5bdc3df9c9afd69a4da3b9da2c20701a0ab110cd3857392f72fa694dc6a25040212c01876edf76ba92d1df8e228a4fddeb4db99d06015cb2731a80cb37bc35571a960d6c79b8b7e5d29fd3d14ccded777b2a440124b5ca487377a868da2f86e9733563dbeee26b12f2623320e77226b18bebf88ee94dc5a3db3086770788795f8b9bccc2a0a970025a824d113c8b89bd855400db0bba5bc21039dfaffa0d76c8723611977924e33bcaaad8a720137788b9bebbd1278eafd8b8a4e3d1f997c2b4c9425e1489fe84c60cd691c9c81e3c94ebbc038c2b1d0e78a1302f74a93f7866aeb37d3e48bdd08974caafb082673ae60e92d918860c95ee9112a2c4511370aad6b10e6d362ac92383da1b49c6e72a6c4453af46504a13494c0a7c926a2aa077c985b61fe4b3eca87905c6525ed5df8740fdb62a5ed04a8b944c9df12a55eca8c5d4ad9827baabb1df88c10f31d997c491b309732825dd1950696393d86ab811846ddd4de29ceeae49882b29db0d3a1870648aad5e7c79d43413b7ff07bdde21fb78eae952fcaeb229452110295b36b9dc26664dba1547d6973162d6c1f11dbaf86c885e04d071a8dd78099831f498af610c3697cb5f13b381a56478fa1218ef739ddbfb4c68a5cefcc51075ae6a3ca65e01aecc045969925335170c563610b1cc48497c5828f3915b3e295587b43dbed0a783378b2fae529f097069071db4b1fe90e13d8c98926195f6d5143131566a81cfb1ebd705b63fc9823fc54950a1986a9c35d523a66cf7fd4b3431ae2bf3fee9393099daf8164579c9f4a0114d0d4636e74ddad73e96f39c65f8f0a877332521b788be7430bf57702bb9b4300519f3a1ceacd322febf2bbc0a438fb34884c2c3943a16a51ccc61a8b3d5f1cc2c4d5b4472ebf88cd4360ca613a2d989579bc96eb515f0ebaeaf21ccaa1059cc5eb25050ea93df0571fb19756a02afa4af6898e53c6dad13cf19e51f86e0e4c8b7de0ce5c5e7257a37720515b4c54cea21c3a4da6b2bc448110b81ff833c18fd27cac7412bc44e76745cc414a0465398dff39605cd235536b3ea03ca3bee2363fd7caff5e13efc5c6f6a79fd77b1917c7fa66e70b96208cc3c714a0579c7ceacf3e51faddfe43bea5cccc3155b4b07e386e48d546d2861f3311e0d272dc0de712792a2b166777957ab828b10297a76084c341bd910ffd4e76c2d27053f294904192209d62f24bfe93e5343328b757f9c5b725e465015fd1e36480c35399dadba54bf4d4879b41eca91c445666f0534c7abb48e59fb9c4ac8d75fcb594305cc2f7500609e1b4d3caa96608ea98eb94233642343035a5dbc04e38b4c82d8fddb195cc1ed05c38a504a017d626d4bafbcf103cf4f716f7245a1f40ba719cdb3cd0ac942bf1dc4557ec1f7c335c72193657334e1a6eea8787e64bd4bf3f577770845b59aeb038e2b2825a75cc77bd4d42018fbaddebc2b790a5c6f23eb1e62f0aca3956e1a0b4cb4ae70710a6d1016ef7538e89943215bace89453ee20f82d67a23df437b1d69ee98089e7c27a4c51824792aee56249359e03a806fd219481928294bdfe33acba4d8c6c7acdc31dda535a7a5a83a3d8881bfcc5a07e1dc57150bfd03ef3dcfa7c2638a38a2d46576a6a4bd9ad53a98778138f16e0d73e0f5b101782d4f2ea75a7d674895fcafc305134ad44629b221726dac26d6aedd1b96243ea484d57c412b02d7fbac40e4857c568b1239e1f848240da306c16632616433c7ce93e5f14c15d67ff19d700b2bbbba63d25a592b07433b5402c701890dfd77a5fc42584319081877ef05fd6c15df8271bb7ae4e8028703c3ef73f8c7b4d5cb89cd7f70893a3a350f341ce7538a0e4aedbcd673a49853711fdc07cf20af14c2eed9d02afdb6fe6aa225df11802c03e800081318a3d7ef9f31f3474eb8db63b75e5450f5edb448831fa731380fb9845120f023b2c6fec0fc319c8ddc4d33ce5a9004e607a3082bcc305589163947811793445b4cc484a23dd196ac29855731748db736b4f0510fef16a3b996ce8688ad21864b6f0cbfa757cbee0b686d03b599b38c6666b72513ce6c301c1ae1f5d2fe2e045baab9e1427ae4bb603d04481f4732206e3ec67fd375ea4c2315bca951c7703289dccb9105ea830d779a25af5c088d6b3250630cbc27060d68dffc21f981aaec3e768888bee3d8c617bac589a5bd34178789b5343b2c1864074a1f9c7fd19a99fa7467a0216e9f1e74d768e0653b2b9a40f27570edbb5d2f484b2b92b84b2a1217ea99d83e8650edfa9e40e7a3847c5b51c1c8dcba92119c7903b67628a5b8ee1f3ee1a06bd928e6996ff9f5d88f2b6a4705538bba1bd338bd34bd4ea2c5be2e8e8a39c8c2ea5585946b25cc1e0b4b7287c65a2e633a367002d3de5a6f55fdb8a59cd993aae02997139bb006afa0c67d662e99d854801e938ae79a4ab8fb416924a0a44fa6d38ac6480de7391aeeeb21e3997a51a3a6051d6e34927afec3f4ccf598d73e011c6758599706a25a533fad81a884260e6d2318fa275d3ac2a6dcc384e481e57a685decbc45eb924638262fb1bac7a39b86ef85070c3031d020df7df97fc1e931ee32e9ca49bb83c037a02e8ffbc07d86a1603c9e8ff3149ad90d75f37c09b8bc31ce2430d149191a6e477c7a6af3a1f0b66556eb56a4206a154fe74049c44fe08e81958540c89c31b263385ea8692be57b1d35ddece9f830c64bf1edebadb6fcc9f7eb07edd3c21191af8e598c413823651034a7149729a41e036e8b3b9e49cda53d7dbebbaf3211bdba5ebe83412216ba875adf13453467c090fa202d1d6ac4862cac6fc82b689558f03760d7b8c01be72913ec81457850ae23367ea81e1c9f854ca146f38bc3ff7c7b2b71f5e9d72d17c010ef182d8f5f8be98b0c9e582b7dda5b2e71673b12d48623432a4c0995a3e6a879f79e4bbe80743c81da6b9c0a2e70424fc20b445f7902514dbcbfffa55f2c2a560f86e30d4b407a29fb5b8cc66809bed7c6c42f5f1d18343fd65688c5efb24f36f43cf342aac54a85f302f3b285d97c8d11a0d059edae3cc771057e0f7bf8e298efa4dd387dcc4c6dbcc6589a9a7499821d36dd4f336c508cf4536c8b6259f9402623809c1d4bb3b778e3648fbe74530ac2f7fc4abe10796520440858dbef41b6717521d7e7daabd98da023bd0b4f9120bac9091dc3833ae80f83a8d786a7ced9e12d16ce2e43778ec1aa907bba717ccd7f024d53839c10bb0cd8c68156c6055f75255dfb29ed3520b85b9994c746bed3ac9f2ecd3025f94fa9a666bcbb9c6dd6160ba1e40e15ff57e3de8bb0793eace077eed7569d7ba6101b44cd3fb0239db074548633137ddf46e683fdf0c1b67483ed06394d608aee0bc27f819b338b12a8ff23fef1f5f9ebb924583c032e3daefb7cefcf498ad0f50c30baa68f49656e838951e2b07acd1c264742eebfedaee2bcd29b38ad601dfadc697d43df3bfab12802004b681840e253f8fe1c28cd307e3a117f4caafa54b82e227c95653613db4e617718666ffe07c9aef493e8d76d74d6f73a11638a5b02fa81f6cc092818857f1da4c149d40f8518d3ad3aa5a17e82c6c7c4ff385fcdd1c10b02e2b3e0daa613e2063bf17186faabe69b1284269443b40b24676fb8e43bf3a4097da04f5ea18de6e1d3969dd110197cc7013b42e848dd9e3164473cfe5d602f9caea7a7a2428961bd572804c0b224c839615cc50cc4e4a4002875bf9ea9514cc06b1b0881d763ac1a9588c94a05fa9a2aaaff658eb994002a36c378293d15f52dfdefe9c6a79689c89e5fbdb762cf67ccc4c50f9ba5208eddb15bc2cc0ad8e636f83dec17f4e233b5a873fdea47e637f643abe8ead277fc315f68805c70c8aa71c3fbe", 0x1000}, {&(0x7f0000001b00)="27714b1f76044eaab21262f1b3eb2a0fcff41c106149cb588cf2cf41fe1c9f6548bc4728f3fd6c8bfb0da81568db19a92a5eaf3f4a6349c796c4028ad0faabea8fa48511c7403854aa47f82913843d5790bee50ea11fafc1afffef3fe63784ac5393cfc4f3a54bdc993d7b688efe08f6c56e00fa729c8b", 0x77}], 0x6, &(0x7f0000001c00)=[@iv={0x98, 0x117, 0x2, 0x7d, "301c229fab4ff929ab47d1f1ab0186919146fc18baf00dac4258bbefd9ebac822ca5c3a0a020b5262f4bf61acd6553261c7558402cae7c5aeb299bf9100d7669bc354cf9fb21e34e9777120e480de671e86b71f75512f3bcb63d78e14350c84e8ad4c29851510c4d99212e15cd427b9f4609be1e87cf3090edbe60a65b"}, @op={0x18, 0x117, 0x3, 0x1}], 0xb0, 0x44080}, {0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001cc0)="23989f7d452465e4cd855411b65d7a568809d363a5ed1f24bc330b2fccbadecd1bed486c8efb471d2ad2aa3223cf4a9cd413ee9ac92e1531c35988885777868e5dd8dd4d01846e35b613c31b7b73", 0x4e}, {&(0x7f0000001d40)="5138246e02444b0d819b4ab0f83e7db6be84f320f4a90769a3d5f4fc05fd0ee91655f9d111829d3b6aed19cbcd7db300665d889eef9ed5f506c758821fd740933cf3841d7b7907261bec1625a1012e15c768e676e6161b436aee8636b2a86a48113554c65e6617596cedc1676a23c2a4ed490f2f103f95b3346d790cd83287609611018dcdc89240c7d88a", 0x8b}, {&(0x7f0000001e00)="1c181bd81f039bd8ac06372e36fb1b7ff303bdbc4380c7e05bc5314d6803510b8f705d09fa3fbd2bebb7e9f81fac31ed66eb8e110819cf0961bf43b24b8e82aacb4f435cdc508003dc517de09a933b3ebc8e9b3b6ca8e88386", 0x59}, {&(0x7f0000001e80)="0eb18809082a813b6d5edf249d368b65133073b7443f234f05be4da3e53904be752dde655038b56108188b12a594d9d9273d803a3c995523ccb0671d9d04d62fd101a41b65e902c080578051cd008432", 0x50}, {&(0x7f0000001f00)="574dadac50ed2c240066162d5b729f7b48eac4d1938442028a1a27d6dd9b1614e1e8669973bb7945ab09c18f4788c3b21a37695007fac2c758d8b3e4fde794c053a0f2c010e9bb7f096840fb055e240d5ec419a7922abc7ddb74d49883c863e724dc49bedf79bf2350ffdc522d4903616fa6107915fd702e443a47efcc477811c7744ca6aa02f561a17a822efb0668ba185e4f5600095e2cc3c617fdbb948fde4af9552406f42da18d507672acf567d6b6de02985a5af377191374bb2ff76a4aa07c78e4be552c11157ac4f7e5b7", 0xce}], 0x5, 0x0, 0x0, 0x8051}, {0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002080)="74d2a834ed5a0b1806f638afcfd89f09a6e21b4e552a", 0x16}, {&(0x7f00000020c0)="c7f785476faf0853a04b40f079d89d8aae6cb21426880d89fc635db5258bf952719b59b779d948d6e63cc7d33cfdf50286874d979cc2208e94549197a6ea8c94b0234c15ad9683438ec1c0034dbf4ad80c45649443a1fdc9b4117454075048afd85a54ff6f0853887dfb4ef1000c2bafa536850290c1afa869651639a3b1a4555fd53f9469cbd864fcacccb7b745cddc5bd6459da734b033b29cd36b6296b6d91335f654afefa808de9a4279f460588dd726", 0xb2}, {&(0x7f0000002180)="f087b70de8fb63142d43098f064e9387a5a9a811e7caba9bbfdcda22d3d3de44c223324875d911da81defe1357fdcd63bc1791e90efead69eee7bb653285f1b41dd8a4f67c738431b6e86886f914004db9399ce120d8ddf1654d6a9b4b7e8215c0bdbadbaa546b72b445fc69d30ae9a08b9c3dfdb3a89dd97590b8a0148092bb374e76b44b8dff899d050d8d992d", 0x8e}, {&(0x7f0000002240)="ea5d0ece912aedcab63cfccdc051ebdd6885e7a927aa060e3fa1595e1265187525db980c5e2200583d75d3d8c06b2dca7af303c5e612c294906eb12f50add86d5cc5bc4b4d7cd3176d1e9a0bdf0024b0539c1617e33508be408fa3b4aff982a41b45f4053dc62c728071591d9e374fb54dcd163d5e5b", 0x76}, {&(0x7f00000022c0)="140bb29b939c11b8ea9f31c54421f3a6022ce0052be6b5eeac09808dda34b0bc4c08660e1ace11099c440fea26b78484d45fb4d27ffb5fc37f4c026d4d0369f746e729f99def70b267834175c9a837ab160a13498a73faaea17398ffdb754bc041e2b55ef33d45b727047b27cd50300a710e7f4ecfe08543bdd5bf8e857c7a0bb9dcd285eb20d2ab211e", 0x8a}, {&(0x7f0000002380)="0ba1a3fc453d6906817a1ccc795d24bb0caf7c7e3481153000f43109d12899a082a498ee0e0b7239ee26ff213ff6c284aefaaaae112c8f394476a16130cb992210b89717f5fec7ed6ff9fcf1194de2f4665fac1d42e7208d97a7f3e15dd71b31f552974dd50848f29a806ed056695a4416752158ccad1c0e40a33dcac9642e5f684c36304a91b52b544cb92250b56b69f6c64806d86c746ef6bf1aeb58d6384420018c18234e04b54e7e44bb38177b4cbc6e5e980a5608816fa467a1198e7b62ad5bf7cf6da62d878e7627bf507ea58af6ec403b1c59a7d1301ca2c0883d539a9b5126e214b593a3", 0xe8}, {&(0x7f0000002480)="009dde8c024e2f2f1dc90b4cb18cf7172dccd36cf873643570ec62c43909f876a29e916e6b9ff40a2af55a3eb7bfba17feed523a15215a1a18c9b2032bf0beae0cb425940b55c7a002c218f513c58a63fcd5e7939bf93fb24bc391bf4b7193ec56adbdcb22c016c525b022e039635a570bbfab78cfbe1d", 0x77}], 0x7, &(0x7f0000002580)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffff9}, @iv={0x48, 0x117, 0x2, 0x34, "f4f0abe86d6168c05b06ddb58c5a9c53eaf4318c1949d9bb964090af77f1f4f9bbe8609b3e8e99b111766d9d323e8163e4e312b7"}, @iv={0x38, 0x117, 0x2, 0x1f, "495b30023b0b4102619130ccd248865a6ac439c175dda7be3ce0b7b5a98e58"}], 0xb0}], 0x5, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x27) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000000cfa3ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:10 executing program 3: r0 = socket(0xb, 0x80000, 0x800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="04020000", @ANYRES16=r1, @ANYBLOB="000028bd7000fcdbdf25060000001000060008000100b5f9000004000200b8000100100001007564703a73797a31000000003c0002000800040000040000080001000500000008000200010000000800030006000000080001f50500000008000300ff03000008000300020000001c0002000800020000000100080002000100000008000200000200000800030001000000100001007564703a73797a32000000000800030003000000100001007564703a73797a3000000000100001007564703a73797a30000007000c00040000de3094c9550c7e9b93df86b97f080000000000000008000200000100009c000100100001007564703a73797a32000000004c0002000800020000100000080001000c000000080001001f00000008000200070000000800010000000000080001001f0000000800010001000000080001000100000008000400020000002c00020008000400ff070000080002000104000008000400010000000800030001000000080001000a000000100001006574683a69705f7674693000440009000800020081000000080001000600000008000200ffffff7f080002007f00000008000100400000000800010004aa0000080001000100000008000100080000001800070008000100020000000c000300080000000000000018000200080001000300000008000100060000000400040000000000000000000000000000000000"], 0x204}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000000)=""/53, &(0x7f0000000080)=0x35) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 01:37:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x4305000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xfffffffffffff000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) 01:37:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80002, 0x0) recvfrom$packet(r2, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 01:37:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000033ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x88640000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 449.222037] sg_write: 4 callbacks suppressed [ 449.222051] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 449.222051] program syz-executor2 not setting count and/or reply_len properly 01:37:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) 01:37:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8848, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = accept(r0, &(0x7f0000000480)=@caif=@util, &(0x7f00000003c0)=0x80) getsockname$unix(r1, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7) write(r2, &(0x7f0000000640)="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", 0x11b) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0xa0000, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={0x0, 0xbc83}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="75eb830bfb1a32de0367e19aff07393a54470228c9d74fae9b00b67f4629afc5a9d20c5e8ebb5d9a1a083d94c5d43389a4333bacb13391fe939b20b7743254b65df7d008dc4885063c5dbc20fc9206d58c986dc83c501ceff250a348f373983497006f000000"], &(0x7f0000000400)=0x8) write$P9_RAUTH(r3, &(0x7f0000000000)={0x14, 0x67, 0x2, {0xd1, 0x0, 0x7}}, 0x14) 01:37:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000053ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x500000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:11 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, 0x0) 01:37:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8035, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 449.650182] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 449.650182] program syz-executor2 not setting count and/or reply_len properly 01:37:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x1) 01:37:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x100) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 01:37:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000004c00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x7400, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3e8, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 450.215650] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 450.215650] program syz-executor2 not setting count and/or reply_len properly 01:37:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x800e000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000d00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 450.465088] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 450.465088] program syz-executor2 not setting count and/or reply_len properly 01:37:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x100000000, 0x8001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:12 executing program 3: socket(0x2, 0x3, 0xfffffffffffffffc) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xabfe0000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xffffffff88200000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200004c0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 450.718623] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 450.718623] program syz-executor2 not setting count and/or reply_len properly 01:37:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000004f40)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x89060000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0xf9c8583c2aca6244, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001a80)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001ac0)={0x0, 0x0}, &(0x7f0000001b00)=0xc) stat(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001c00)={0x0, 0x0}, &(0x7f0000001c40)=0xc) getgroups(0x9, &(0x7f0000001c80)=[0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) r8 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001cc0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000001dc0)=0xe8) getgroups(0x4, &(0x7f0000001e00)=[0xee01, 0x0, 0x0, 0xee00]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001e40)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001e80)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000001f80)=0xe8) getgroups(0x9, &(0x7f0000001fc0)=[0x0, 0xee00, 0xee00, 0x0, 0x0, 0xee01, 0x0, 0x0, 0xee01]) sendmsg$unix(r1, &(0x7f00000020c0)={&(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="7c42126be7415fd16ad0a6ec75e4077ec2d7c4d26eed642317ab822ad1b22defe6c54ce24118bdf6ac89617c7f5a016f6f3c5ddde76df28efe910939fc13c55e01d5cca496879cc31d1ea5823f345723ee3fdc82730de05ab24511735abc4f05a293b41dc6543f79324a9acc126cdc7302644ed8cea972c84cd1f4d5b3397c5b2cf9858f716995dfd49dd909a7ce1c0029f67b856b25bea3c71fa51ba4720e180846acdc389e51f3478c72d6ceb8f5e042", 0xb1}, {&(0x7f00000016c0)="f2eca2dbf11e02754ddff693577311598dc47f02caed1f799f260b77fd24f22260ce8680ad21127f3ae9472eeca9bdedeb9af888cc7cdb9b2762bfd95e282f8151a4e4c09c669f27712982fbc93a2354270db1335a371b6cacaefaae57eb386c0319dbb31f28100b9484d69d663eb7ce2f2b1b1cb9f5ee218af1bd9a0558513dd327daf9d49381b793ca896a9162db25686d9b00815d2db469f20efa30c26d171865e77caaecb9cba512edf59bf7d9dc814da070fa4f05efa1aaaabce88b8b0b43a536292db756ab1b1c1bdec41cfd034977e5b78e416882ce1f1291ab6806e1a7f11de66964", 0xe6}, {&(0x7f00000017c0)="804dd5aa43f765978e42632be335395a9f0589c9f0402e27f9b6ec8dc3680a27d3f89e8e99dbb5b19fa6c2c7077889c2c531e9443098cfc06b2e33a257e735b20e268f7d3fffdade41ab8e7c9e209aa5694d2dae6617", 0x56}, {&(0x7f0000001840)="69109245e12e0a4c53ee93c3ed2a19520175dfd3cd37683c564c4ad52285586f95", 0x21}, {&(0x7f0000001880)="393661d66401e8f519f1fec7ecd77f1d148f1e3e2f63043bd48a67040b2796439302095989c0b8857682c3337b3d27b4aa4c60b2089964b67b9f198f83ed9b819e4ea4d0a48b3c422e55587736514c51d82fb0ad90afcc60", 0x58}, {&(0x7f0000001900)="e670b81c7c7ad7a2ce9a9082356ecd24009be2b28f34d6061c8b8b1b21f9e4703b06e348977b6495937d1467770d9c6943b43a050fe7cc42aea43c1486c66b7378e8f4a83c578ff6aaa4a81d7e0d06826772e83627907b760447fa03dc72aa5e2467f293bbdd2cc23e215ee2c9c00a39564a03d07c618e04ce0f5085f9c46b009ce473ae21bac40cb38155745b424f40c215b19c041cb0e7002c96e22ba9e016bb2df293e2491b175fd0adc05b2faf4ad8725f61d2d2d95d6c4e6226da1879c085479af8919c4e78656d", 0xca}], 0x7, &(0x7f0000002000)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xb0, 0x8044}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) recvfrom$unix(r15, &(0x7f00000001c0)=""/16, 0x10, 0x40000000, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) accept4$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x80800) recvfrom$unix(r14, &(0x7f0000000280)=""/5, 0x5, 0x40000102, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) stat(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r15, 0x0, 0x10, &(0x7f0000000440)={{{@in=@local, @in=@multicast1, 0x4e24, 0x10000, 0x4e20, 0x8, 0x2, 0x0, 0x20, 0x0, r16, r17}, {0x10000, 0x401, 0x6, 0xa5cb, 0x2, 0x2, 0x1017, 0x5}, {0x1, 0xab, 0x0, 0x200}, 0x1381f47, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d6, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x11}, 0x3503, 0x3, 0x3, 0x2, 0x8, 0x2, 0x3}}, 0xe8) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000003000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 451.195495] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 451.195495] program syz-executor2 not setting count and/or reply_len properly 01:37:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000090000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x200000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 451.520591] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 451.520591] program syz-executor2 not setting count and/or reply_len properly 01:37:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0xbee, 0x202080) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000300)={0x2, 0x0, [{0x35b, 0x0, 0x1}, {0x317, 0x0, 0x2a}]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r2) ioctl$FICLONE(r0, 0x40049409, r0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r4 = getuid() r5 = getegid() mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x10, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x94c}}, {@max_read={'max_read', 0x3d, 0x1}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x67, 0x63, 0x7b, 0x7b, 0x32, 0x7f, 0x77, 0x35], 0x2d, [0x35, 0x0, 0x77, 0x31], 0x2d, [0x39, 0x62, 0x33, 0x37], 0x2d, [0x7f, 0x77, 0x32, 0x37], 0x2d, [0x31, 0x0, 0x3b, 0x32, 0x7d, 0x77, 0xa09b7d5e617d5ce1, 0x7d]}}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'eth1-vboxnet0'}}, {@obj_type={'obj_type', 0x3d, 'wlan1(!'}}]}}) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 01:37:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x7, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000020003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:13 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x80, 0x0) 01:37:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x300000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x9effffff00000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) [ 452.044853] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 452.044853] program syz-executor2 not setting count and/or reply_len properly 01:37:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000500003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:14 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x81000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0xf, @sdr={0x4f75737f, 0x1}}) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsync(r2) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000140)=""/198, &(0x7f0000000240)=0xc6) timerfd_create(0x2, 0x0) [ 452.501311] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 452.501311] program syz-executor2 not setting count and/or reply_len properly 01:37:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r0, 0x3151000000000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in6}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xfffffffffffffd5b) 01:37:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffca88, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000303ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:14 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000180)=0x8000, 0x4) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r2 = dup2(r0, r1) write$input_event(r2, &(0x7f0000000000)={{0x0, 0x7530}, 0x17, 0xdea8, 0x10001}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) r4 = getgid() chown(&(0x7f0000000100)='./file0\x00', r3, r4) r5 = msgget$private(0x0, 0x24) msgctl$MSG_STAT(r5, 0xb, &(0x7f0000000080)=""/66) 01:37:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x86ddffff00000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 453.160397] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 453.160397] program syz-executor2 not setting count and/or reply_len properly 01:37:15 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x400080, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5d8, 0x3d0, 0x0, 0x298, 0x3d0, 0x158, 0x508, 0x508, 0x508, 0x508, 0x508, 0x5, &(0x7f00000002c0), {[{{@ipv6={@empty, @local, [0xff0000ff, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xff0000ff], 'veth0\x00', 'gre0\x00', {0xff}, {0xff}, 0x7, 0x0, 0x2, 0x2}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x80000001, 0x4, 0x1, [0x6, 0x180000, 0x2, 0x9d58, 0x5, 0x40, 0x2, 0x80000001, 0x6fc, 0x0, 0x20, 0x9, 0x8001, 0x8, 0x0, 0x9], 0xc}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@rand_addr=0x7, @ipv6, @gre_key=0x1000, @icmp_id=0x64}}}, {{@ipv6={@mcast2, @ipv4={[], [], @remote}, [0xff0000ff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xff000000], 'ip6_vti0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x1, 0x4, 0x74}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x401, 0x3f, 0x10001, 0x8, 0x3}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@loopback, @ipv6=@mcast1, @gre_key=0xff, @icmp_id=0x68}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, [], 0x18}, [0xba80d436e227c9d8, 0xffffff00, 0xff000000], [0xffffffff, 0xff0000ff, 0x0, 0xffffffff], 'bcsh0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x7f, 0x8000, 0x2}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x3, 0x3e}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@local, @gre_key=0xfcb6, @port=0x4e20}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff000000, 0xff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], '\x00', 'teql0\x00', {}, {0xff}, 0x1e, 0x80000001, 0x1, 0x40}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x4, 0x2, 0x1, [0x3, 0x3ff, 0x8, 0x7f, 0x7ff, 0x1, 0x46a, 0x4, 0x7, 0x0, 0x2c, 0x7, 0x3ff, 0x8, 0x200, 0xeb], 0xf}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x0, 0x1}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r2) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x5c, 0x0, 0x2, "2e28cb055fbe85cec7d432e8c2a276ae", "9b432fd463d8c8231dfd2d10e54ff72727238db060d33fc9e93744d48515abb09042c34f29cd66b38eb8405ae8d2d5e137a84cae7451bf09ba5aca52bb0cd0bbe0e5c9057f8548"}, 0x5c, 0x1) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000180)={{0x2, 0x4e21, @multicast2}, {0x306}, 0x16, {0x2, 0x4e23, @broadcast}, 'team_slave_1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x6c00, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x1000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000006800003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000002c0)=0x400000100000001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 01:37:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7ff) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:16 executing program 5: socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 01:37:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000007400003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xe0000001, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x700000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xa80, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:37:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x5a30, 0x101500) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x42c300, 0x42) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000400)={@empty, @multicast1, @multicast2}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000780)={0x1, [0x0]}, &(0x7f0000000640)=0x16a) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000680)={r2, 0x40, 0x4, [0x8, 0xd6f, 0x101, 0x9]}, &(0x7f00000006c0)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)={0x9, 0x2, 0x4, 0x20000, {0x77359400}, {0x5, 0x1, 0x80, 0x6000000000, 0x8001, 0x1, "8bca83ec"}, 0x400, 0x1, @offset=0xfffffffffffffffc, 0x4}) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000240)=0xa) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000100)=0x0) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f00000004c0)=0x471b, 0x4) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000440)={[], 0x0, 0x0, 0x9, 0x8, 0x0, r6}) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="0000d2001e3e2401b4625b4b7e3134a2506746abf218f2c3438719928429c4ffd552d13b573e173860793a71c6acac02cddce6f1c81ccac3f292badffccebd98ae44a4162007896d0291b7a84cdacd7693175e760c74d9df282e7294a3d5e30d94e1bcb4a823e1c4bb1f72336338538e1a54e36ebefa4da8fb3d860aa64b8d350561523975e4e3041d5f3459c4d4fc3f096510b7c546a91ded572163ba317c40ad86b7d0221d2a73d261118eceb9398af607a754a0f5fdc1354d5b7212b7f9aad9d9ac16da2a18eac0eeb0c55d00000000000000"], 0xda) 01:37:16 executing program 5: socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 01:37:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000fa0c00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x4888, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 454.594316] sg_write: 2 callbacks suppressed [ 454.594332] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 454.594332] program syz-executor2 not setting count and/or reply_len properly 01:37:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:17 executing program 5: socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 01:37:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000060000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x88caffff00000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2a1, 0x721682) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4080014}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x14c, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xac}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5128}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x5439c0d8, 0x5, 0x8, 0x7, 0x824, 0x0, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x2, @mcast2, 0x8}}, 0x7ff, 0x8, 0xfff, 0x5e4, 0x7a}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}, 0x1, 0x7, 0x6, 0x5, 0x10}, 0x98) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 455.261276] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 455.261276] program syz-executor2 not setting count and/or reply_len properly 01:37:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x88caffff, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/135, 0x2c}], 0x1) 01:37:17 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 01:37:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast1}, {0x307, @local}, 0x4, {0x2, 0x4e22, @loopback}, 'hwsim0\x00'}) 01:37:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x4c000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000006c00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 455.817703] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 455.817703] program syz-executor2 not setting count and/or reply_len properly 01:37:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x18, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x288000) r2 = gettid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 01:37:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000740000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:18 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 01:37:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x143000, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/135, 0xfffffffffffffe83}], 0x1) 01:37:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x800000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 456.356991] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 456.356991] program syz-executor2 not setting count and/or reply_len properly 01:37:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) socket$pptp(0x18, 0x1, 0x2) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r2, &(0x7f00000001c0)={0x7a, 0x7d, 0x1, {{0x0, 0x5b, 0x9, 0x1, {0x8, 0x1, 0x3}, 0x100d0000, 0x7, 0xff, 0x6, 0xa, '/dev/fuse\x00', 0xa, '/dev/fuse\x00', 0xa, '/dev/fuse\x00', 0xa, '/dev/fuse\x00'}, 0xa, '/dev/fuse\x00', r3, r4, r5}}, 0x7a) 01:37:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x7a, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:18 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) 01:37:18 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000040000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x3, 0x94042) ioctl$SIOCNRDECOBS(r1, 0x89e2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$getown(r3, 0x9) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x9, 0x3f, 0x1, 0x1, 0x0, 0xffffffffffff0000, 0x80, 0x8, 0x800, 0xffffffff00000000, 0x1, 0x100, 0x3, 0x4, 0x1f, 0x2, 0x200, 0x7, 0x81, 0x401, 0x7, 0x1, 0x4c, 0x8e12, 0x1ff, 0x7, 0x2, 0x1, 0x1ff, 0x81, 0xeae1, 0xffffffffffffff65, 0x7, 0x7f, 0x7, 0x800000000000000, 0x0, 0x8, 0x2, @perf_config_ext={0x1cb, 0x7f}, 0xa881, 0x0, 0x8, 0x6, 0x400, 0xc7b, 0x80}, r4, 0xf, r3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) bind$rds(r1, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000100)) 01:37:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x806, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$addseals(r0, 0x409, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) [ 456.946208] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 456.946208] program syz-executor2 not setting count and/or reply_len properly 01:37:19 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000290000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x1, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000180)=0x80000001, 0x4) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8100, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000080)={0xff, [0x6, 0x7, 0x20, 0x1ff, 0xffff, 0x2, 0x6, 0xfffffffffffffffa, 0x567cc30c, 0x2, 0x1, 0x10001, 0x3, 0x24, 0x9, 0x40, 0x0, 0x2, 0xffffffffffff73fa, 0x0, 0x6, 0x0, 0x13b6, 0x6fcc, 0x40, 0x8, 0x8, 0x80, 0x1, 0x1, 0x6512, 0x6, 0x2, 0x8, 0x40, 0xc00, 0x4, 0x2d94, 0x7fff, 0xd90, 0x100, 0xffff, 0x13, 0xfffffffffffffff7, 0x0, 0x1, 0x3, 0xffffffffffffffc1], 0x9}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xe, "90dbd0852c2ae9d76597d599e956"}, &(0x7f0000000140)=0x16) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x3ff, 0x4, 0x7ff00, 0x7, r4}, 0x10) userfaultfd(0x80000) [ 457.312939] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 457.312939] program syz-executor2 not setting count and/or reply_len properly 01:37:19 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200000000004c3ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x1800000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:19 executing program 0: syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x9, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r3, &(0x7f0000000380), 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x3ff, 0x71b1}, {0x3, 0x3}], r4}, 0x18, 0x1) 01:37:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x101100, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x2, 0x100000, 0x400, 0x5, 0x3, 0x100, 0x6b3, 0x4, 0x4, 0x9}, 0x10) 01:37:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000006000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x8c, 0x20, 0x400, 0x70bd25, 0x25dfdbff, {0xa, 0x80, 0x0, 0x7, 0x6, 0x0, 0x0, 0x1, 0x1}, [@FRA_SRC={0x14}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @loopback}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x8}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, [], 0x1a}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc4}, 0x800) 01:37:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc70ce37cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x4000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 458.040314] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 458.040314] program syz-executor2 not setting count and/or reply_len properly 01:37:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x2, &(0x7f0000001100)=[{&(0x7f00000000c0)="5b17661498", 0x5, 0x1}, {&(0x7f0000000100)="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", 0x1000, 0xc06}], 0x1000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x14000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000900003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 458.459320] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 458.459320] program syz-executor2 not setting count and/or reply_len properly 01:37:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000100)=0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x88480000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:20 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000073ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1334, 0x200080) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000080)=0x5) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xac, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x200, 0x0, 0x10003, 0xfffffffffffffff7}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000180)={r3, 0x81}) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000200)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x1800, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:21 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) [ 458.846361] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 458.846361] program syz-executor2 not setting count and/or reply_len properly 01:37:21 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x8440) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf250d0000006c000500080003000700200008000200030000000800010012000000080002005b0b0000060002037440746ca9a5bf4097af14f784bd00084000001c0d0000080003000500000008000400010000000800040007000000080001006574b60bb474680000000000000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 01:37:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x600, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xf0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:21 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x103084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200007fffffff3ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000180)="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", 0xfd) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8200, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) 01:37:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xf0ffff, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 459.304838] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 459.304838] program syz-executor2 not setting count and/or reply_len properly 01:37:21 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, 0x0) 01:37:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x7, 0x7b1402) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) acct(&(0x7f0000000000)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) write(r0, &(0x7f00000001c0)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200000d0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x608, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x800000000000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:21 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) [ 459.650335] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 459.650335] program syz-executor2 not setting count and/or reply_len properly 01:37:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fchmod(r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x400400) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x1f4, r2, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb4, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800000000000000}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffff00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x64}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000000000}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd6b5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb7e2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf9a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 01:37:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x2, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) accept4$ax25(r2, &(0x7f00000002c0)={{0x3, @rose}, [@default, @rose, @remote, @default, @bcast, @null, @bcast, @default]}, &(0x7f0000000340)=0x48, 0x80000) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x8, 0x1a83a7e3, 0x7, 0x100000000}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x1000}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) 01:37:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x4, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000070000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) accept$alg(r2, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) 01:37:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x1}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000100)=""/39}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000280)={0x0, &(0x7f0000000180)=""/250}) 01:37:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xabfe000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x74000000, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 460.073419] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 460.073419] program syz-executor2 not setting count and/or reply_len properly 01:37:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x200000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200000000000d3ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) 01:37:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) [ 460.503722] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 460.503722] program syz-executor2 not setting count and/or reply_len properly 01:37:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x6488, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x2088ffffffff, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x114, 0x5, 0x3, 0x400, 0x70bd26, 0x25dfdbfd, {0x5, 0x0, 0x5}, [@generic="d0b0049011153223461a00045964596b67ced35b0118c1e6b996dd7c2001f5c40cfa8b94160505dc58050d5d8f13d8cdefa4f4ca6eeeecf00f8d798c76bd658af9ddd9ed9f71ac01482dab50cc9a39820774307dfbb6b93271bd7d73614ce854dbd9a581877e2fc4e9bb40b8b50689d94ba66cbf1174eee9aff118c0692cbe089faf1db40a476841ca9b017b5c12526207d5fce3bbd44af1d9f67e015f3be8d787b429", @typed={0x18, 0x2e, @str='\xablotrustedcpuset#,\x00'}, @typed={0x4, 0x49}, @generic="c8587715e0c3884e7ba0e747e7d6a54d0fbbb96315b95e22171b8a203b666393cd3b5b7b2ee4098681a58745a1abc7fa2defbf91f9192892d6ad60004fcb566b31"]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x10) 01:37:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000007a00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x10000e0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 461.053646] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 461.053646] program syz-executor2 not setting count and/or reply_len properly 01:37:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000180)="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", 0xfd) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000020000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x600, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x87}], 0x1) [ 461.601108] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 461.601108] program syz-executor2 not setting count and/or reply_len properly 01:37:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:37:23 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffa888, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000093ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 462.148295] audit: type=1804 audit(1545701844.244:96): pid=23941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/616/bus" dev="sda1" ino=16929 res=1 [ 462.253561] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 462.253561] program syz-executor2 not setting count and/or reply_len properly 01:37:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xe80, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0xf0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000fffffffb3ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:24 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) getpeername$tipc(r2, &(0x7f0000000100), &(0x7f0000000180)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380), 0x0) [ 462.658917] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 462.658917] program syz-executor2 not setting count and/or reply_len properly 01:37:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x6000000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:37:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000043ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x8, 0x400000, 0x5c95, 'queue0\x00', 0x200}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x4000000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 463.363651] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 463.363651] program syz-executor2 not setting count and/or reply_len properly 01:37:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r2, &(0x7f00000008c0)=[{&(0x7f0000000180)="0d7a3c5c1bda9730d22b381ea03988aeb0574161ec0307022b8f30fc73d6f0e4680e0231133a36f646cb99bb4175f58098a171128de8613c822c5451bc0b7da683808428edeb6d9d851b0d093da720cc2a889f0d449e779408e675fa2a8641c953c5d3fe60520f771925a95e641a3c520be925272e62763c1a66f61e005d1f327d986b2c96fd6184e7035fe924b80dfde7ecc8b94bf191fd6c4c71ae9d6125a8df5f2b6ac07a37ae5605938bc2443e42dd", 0xb1}, {&(0x7f0000000d00)="edf03f4fcaa062de664783aebef042d0d8eb8e3ae481c25a15e2cd20b033b9531cb9566b975b5465b036bb42f9cba2f607bc735a92e231ba473bae38a925e775e6d68046063c52ac7ca6294dd3024d202746d8239b551a18194277552f7d17e7f697bf60b9e2e9fa7e5f4bcfccb02faeb8f138706ee233a9ec78e800bb5b1df6888d0416c1a0f312efe6a20b110712301e77d7da205bf090d6e9eeef08cd8473d6b271dd9013c6318287e1cbb3d5d40dd606266538eb2e2e2b1a7e9d6ebdc40598c91d2cd4ccef28d2a915e93cdc99ccb53dafc8e5f5abbf543aceaff07aff02a91c8611a5c683025cac2b1aebf1", 0xee}, {&(0x7f0000000280)="0b38c66047163d411beeffc3fcf6de0cb293638dcb646c24e6bbbbe37655bd63b7889d1579692d224c700fcc3e3ae14c5fe32505b51cf6e334370b5d98bea1941117a7a1b31fb855bac1d561639a65761a39fe008ee6ebcd50c008541a6c700e1462662774ae", 0x66}, {&(0x7f0000000300)="11e2a9308a35a0e5bec3f53e9b467b5ba7aa2247bebdf92400c2b833a3312db3d19e24960e4be7a00453aed3cf69f67180c707f399f34fcf9efbee693b91536a8be92b3babf8a7a9b9a9a8c8614a77504a678b80ded526c2957a5908579fedb4d4d4c26d64c84378d6785ba2f6bf474d66ca2a8f05bf1486946a15a4f9c3b1eb62ff6c5fe84d4155b614cea1e82bef3d890cc4c2cc077655", 0x98}, {&(0x7f00000007c0)="1afe26a095c211be0edd49a097e9ad65dbc94fa11577c836933937a67d8fe0f75bc09add8874b7cd618e07be7f1d5128dd3e551d939a0b2562b38ec2621fb9e47fb85c047050c9c71bc9123f1079d845b24ebafaee2b0bd6a667231f0e50c4ae590d9ccb26e73c8017a91e7d8850be82010bdfaa6ed02f83e2b838e6f7261fb0f9459d720a8ba41df837a326082731d5f36a9a78f94d8ddf9a8c8fe3881117e097350bec23c5d18412704076cf53c6e8d9d7d9176f789427d25b77222f48c7ee47", 0xc1}], 0x5, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3, 0x1, 0x1, 0xf, 0x3, 0x80000001}, 0x20) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000003c0)={"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"}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)={0x5, 0x0, [{0x100000, 0x32, &(0x7f0000000940)=""/50}, {0xf000, 0x2d, &(0x7f0000000980)=""/45}, {0xf000, 0x87, &(0x7f00000009c0)=""/135}, {0xf000, 0xb5, &(0x7f0000000a80)=""/181}, {0x1, 0xe6, &(0x7f0000000b40)=""/230}]}) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000080)=""/185) [ 463.579418] audit: type=1804 audit(1545701845.674:97): pid=24025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/617/bus" dev="sda1" ino=17201 res=1 01:37:25 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000050000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x60, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000180)={0x100000000, 0x7, 0x6, 'queue0\x00', 0x7}) [ 463.927605] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 463.927605] program syz-executor2 not setting count and/or reply_len properly 01:37:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000203ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:26 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) [ 464.334861] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 464.334861] program syz-executor2 not setting count and/or reply_len properly 01:37:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000080)=0x1) 01:37:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8864000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x8, 0x200000) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000100)={r3, r4/1000+10000}, 0xb6) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:26 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) 01:37:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x18000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000293ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000100)=""/55) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) sendto$unix(r1, &(0x7f00000003c0)="353c2c6e8a01d404b2a69be5e15eb72fb5fd70046f050712560d23e67685adc28862934b64d3c631bfc793a8b1f76019ee51b2c708253cb5eaab92a54eb2248241042bf16693683950ada3baf73faf2d42dd928df3584f4376404cc2c626a3ff214c8668b88301ac8d29f3992272dd0406efd9dd2e16f47b33b0a6ae8045a555579e1f11fae1356bb2634f2943e9ac31950f0007a497b87d47765c894258d5047deaeef48400a3364b27ffc5db9e25e0c4f4f5c4f45b83413218563fd017901b55d70c1968ef60e506821333692bfa5ee9a5f1cd5ba292b90216bbc960cbc649e2483f44d8b6c50e78b65d08fc26354b7c3024f8cc102b87672d9352be83b4c965ef9fbe37fc66f1dfc4ee10aa04d82a946d7ada604b03e70a305250302c83dc9c9c319e22df65c7463da45e94af2fd3aafd496acbaad902846b443ad2feca63670e78f89f2bc092d002c4d41da3e2a19928fbc2b0c64c4b234b2c0205c70b5f5cf09684c664c63177202dc4aac7e2ff1c18d4136dcf44a29f9f18d93b2d84e516360d51b408364f6bc4868f9c6f4d72dacb74d282d7724931e4e5d70b0f9d8205a3e6072e0acfa4ab76a27608dfc793c98282b811b0d5702674faa9dbc4db017a90a93273bd4078ecf26d900d7f070b1b588129a07995276809dec05f8317ebe068f9ca03d6de296b1d88e41b81907752dea5203616bb4f9c33065710e5b3871b38fd4ea61ad8aa65adb01d02404cfdf1f545773e84cedc18ef684885f57d3da5927555834076408b641888efa7b353fab12c2075e91826d1f1748601ce68b7ceb834c5baa6f938dec3cc95b5beba022ef7a776b7d2f152a7326845e1c08817dec59785c485cbfff2be310d61bdf7c15dcdf50589cd771d3e9a06a44a57896a61b06339e6330003693348cad09b477236c9fe1576f1be21fafe6ad442c0f18f7705bcda66eb11c3f6d59edd16ba3cdf5f9831d95f7d4d46e4f738689dacdfe9df4fea3b3b135c6299190d1d1cb8c9e1f0536dd8496738742993a0eed5b3d45ea93b697b0ad6e4478ab83222a90bb4adfbe16f9d61bc5325a0c7a7cb3df0860d6240d32921d94d07779cf8e2f536c6777b10fcf2aa2a5c0ac3bbec8035935ca2d4fe0fae679f69d55f2b22d1737f5466e29760d0f815fa7856472e7854b6f1959b39f505d63bf890dc2ffa71ad3719e5e8f3b001d6e62d606572168a186a881ff1ceb5de721dc4d1169542134ab9ea1d8558a0f7d1c86cd62f440f6239e59a935d8f6c18e5ef94be5ae3f99b53792a3468ab1a2fe4c036846fae6d1ac99bffae81afc29e4137838e23bfd2887824628bb872c86ca0b236340e22d7a4a5221a99d0f61df73e26aec46612bce32f7fabfb01b463570a80b5fc02b2f2484ba09ee018fea421e180b7a438af233d5d2326ae2a1d0dec537d1f162b70903e31468dba51e1e89da83160ff9b423eafab04844f90e4f8e4daf649737c7145d3a7d038400725436fafeaa249fc314bfa003c9e77fa5627af27fcc6d2de3deb82558b6b34cfdb6263a7d63f6595df2b49fae42e4374415a2c1b928a94c4e3870a5660be341de642571cae91930e169019ca65677a153746f46340fadcc07fddc808c7f690affaae23374708f83b47cdff09ec3994458aafe202fd1566afce69fa69bc30f9ec9d71d5d5ddf815483b4323d9839e2da628257971338a2bc18c05b448013c40514ff88cf16bb229f33f2f39619ce47767c5fba6c4b643ed5e6db6063ab9ea0dab64ee4a8b0a841f2f4a7cc3e49212d5a917141b139fa1b2a2a28365fe4fb29db4e6f773d7644016ebca4ea6f86e26ed5382ba481bf57745f7d4abdb5c8aed639f7b2034f73758e38c898e618c71b2289474fd8cd7e85fccdc9d1f21add49b47b364d131860c44518a1160958d0a3866163f79c31ffbfbdf2c3daa693a80f29083476b7b0668990131bcc67d411cd73a4519d8ec8178b9544efa97c5ac26083c7824e6ad93cc165908e35051485c2ed8280fcaa63931bf5f3f69c021b5fb82d5ce3a8f851dfa8ef196a93f163283a118ed9d9e47bc033e5e875ec65c8d61a290fb5c0797973504a0c0049f4f6d331ec199f146c9545e42e16d02a1691efc304207d3dee09658749dd057080a7f65ed52b9c694d20ac28ff3cd9d64455ee44194846cb55553972ec472752afb8a60da6a107c5398260e984e38c36ef3c91307f6e37079f96ec9badd57b4b7da5a0885ee1802d22ab5ad335a957fd2d9012a52ca273996de0d8f8c977bffda7c45d383c564c05025afa52370c21a4f92dc1bc58947fedc21f580fa97226bec556dbed082757c2c457250dc1573768f6d4e795ddf5f898988d724c1b5859af497024a9e03929fd40eaa5a9ef497f365a6dcb391fdb48a73727d7897553e6bb2bb06e33ef7162966ab17a88f52d51db49577f0b8bfff2ff4baf64d964d75177790c2f5dbb7c842506ad89211c41f9ecda81664c4cebc47157e105d567d293b01ab56579075ccb6b5e0deabbf236c3a5272c7b05fdaef2a9b6aaf03d7d72f11c03ec9fd11e7bca9e52689ddc2f050772973fcc6a12bba09094504d8378b8e68fcd08fae8b6fbcdf173dafb2b7194a0ebbf19444163153064c5e3539cc62a51243b76c14fffce13b54aa7eae412f3afe65d9cbf87137ac5c342889efbb0e3a10c148000208190c0247f8176cc6f26bcd4649e05b226ffd95b1237dca33689f01d81cdf00a2f1545d15617036f09e52a4bca26c9d92516764d15a1aeeab2906f889f2b0151aa83c2d4e936d7858c492e9d4ed3cf873c23f81a56c14b1a9c00f9b9af5b24e2afed9d71c7633afa1e5470ddd23b6ca3153dcaeefe436efeb1aa770f01505453decdd87ee4eb0d0bc96e6ea5cb7a7d92c5fb05c3bd2da6c9d55cdab5184f668c94c778e72576dee615e36f56d4d9f6b8d0d44c4417d5c8d7d83f4f0c697a61b873b1d00d35da346baa58e30d21accc0f092429abfad96234f887053183b578297cff7e7d85620c42d9aff0a58a29bada883689791a741ad73b3a464faef3aa66281b3fff45b36223df4d1a9048b5b08f8ec8a85fbb5c2d14a1da622a8a151664a3b71d0bf66d0b025c9e872dbda4631cbc92aeb3c23f0fdcd6b9e2d210175ef63f712b88980ff3d5f6e43568a650e759f61a6194f431368107a2f7f3f42ab0c7be83f6bc717bcf0c71c379f09e86e0f2d8a876260f39af464267f3ca5df6e55cdc4f2b0bc993ed5e4830d0d16cdc99642f17651f96bc74725fb0199a5639be6d043881608537a6abf72728141c875af28c87c6c4968a4043bd776ad862f427a23564f942e1a0f6e529d21c198ddfc6be94383327fe4bbfac3e4e090db28725d35bd48f77a9e595547bcc2c3c6e0ebb65c87f99352885af79c5dabbf48219fad95652c4ebe1b84039dc32bced8f7b6dbd11d8bbc45f9346eadcb5dcd799439e777b5cba1c2ab6779eb952c62143ce668979d41be2ef59f9d13cbdb2b2948ee452dad057f95bbd1322c076a0306ecf9e726105347e0136fbb4c9a7e059e8b68178eab63ee1167b0d95b7b4776c81f9dce7b787ef08e44e2f059661e0fbbe9e9110181e79dc4d02a8b92b7cb3bde117d01a63528c40bd788eafeea7b9700c7e2e33f7e1fc4e466e41f0bb7e4d686e15c0fa80fc52e831c04242acf0e0d77f417a0ad01a098e27c1846ea83e453d13dfa74ce00043f796509fb88fa0e11d79d223957c6ca71812fb47790aace3d4783019ebce51a84ca550af6aa14681448bc49b503d4156cebc077bc56d252190de78d2dbbd92a6ecb1aa8028792b3f2667e123d17ef1d5e1ae93fef133cfc2fe845542a79ba4f8b4f58cfb7015be8459d6cbf7d378f851a154eb9cd3812d533cdc5f697c995449727d66844e6d16c65f340925c69da1048a31635adb01d438391fa94610318305fa4d339faf7029eef171a85e709ed493d565ff508b941d8fae9021ab5da2b6c24c0b5cef7f731e5ec3d5401e0f8b9edb2440b15e858424106fd0e3c8245e5986e08f8cff59a3a36231832edd7f7e77a8d45400dcb41616e18f6e604442b3464008c7d717c6d6abf89334092c738c0b0c1d9b73bed7e960724dfa034642bce18c4dd4876da72924373a0e269d2e245fc22d745bfca691d96aadcbe6b717d7f405ed490c4b293cc80d9494f62b0830b6e5988db88faa0a8544ccf62e9fb819a219d42d5e303d3f4ccd7585aa38ae8c2b1ca29a8ae1674c41faf2589231b043123d7a36f46562ae4d21d546d738bfdf6e402b2acda0608119f445ca91c6479f4965541d785e3790debbd17cbe20b16cfbaf30a0c4d248f2464b32cfd821d854bac7733f6fc08d3956d0242d8474863e0ab02df91e7fbff6134ecd9363b28f04c00cdc5b4c66282d748df916525cb2ea9d4a9d6b8d22a71e1b0ff42b600695076d809d22730663260712a01e0f705c613d228d1b608043438a69e9bb04139fc6084bb9962a23ad7f92d07ecc28473e34a93fc2bc26881915768ca54fcf111e1a7737f3fdc69ea99772a0d9ef45f19721d1722dbecd6af367820511643c330b0884ae8bf91d610f4aeba2be9f19b41c24c0ca3ccf64d74ada231135a5af9607002477c1f349f582bdcd9676b6e3e26f01a9d0e971a2b9d297dfddf05e19a2e652764af1d5aae6298bc0306c36fe733549752b13e81c6981f753dd4036bf55cc5655a0a4cd9c34f807869011feb7bbaac0b65c1c6edc3351ba8c93bc8387011dea877d2d948d5cdcc6cc7282d6c92a4020194a3e3fa617780c65ad9da25c629e45f08787d0fb3ca2c0fd1c81ac79d0a5799b32f68c72feaa80b5a5b2c1c95d231333792dd9faeff351925e3f39c9139f3e913c9c6ae4afb7d19ff2b152844c9597bb99bf5fab702bcc87a80fc42d4e9f95c34b9bf4ca7ab4c089020f3a2398a4ed61ea3a04c694319f5015392a90bfbf06149239ffa7f54a6fbd39acc1d56c60fda11e9eb42d0c006f115d2f6c42cdca56c251ec1dfff0875c186b626d7dfbba63078729e5ccdbf6aa956472f67921e39d480ed8aa5554f0aec08d368ad6b69ce7634948722859a8ceb4d952ea6f6de1e773084b3faf037139f278f8a420780ebcfe208300d43ee19edc61ea83bc46d07c2aa297eb44ededf6cb124d149d10b999956d67b69deda856b8372a5bd31ddf99f521384ca3342ee91c2fec69de423550311e72565cf0380150d9d337464f8b2dc351724c59aae616906ff192fc48286f4b7d87d8d11cdd2c5f991903bf472722d258f54c82528e46dc8bc36fdac245fd26606e1f0b2da0bbd329100eba7ff9d20ffef5aa8509e7cbf949d03d3e2075c751de3854135574ed403bf5c50903a11a3d73cac54c462176ebb6acee8d50e8319ec64fb2ac99880a0cf24aa85f152d9be53545f740b03378afb6d8af39743a683bc3f7f61b549fec518f1c404ef2eb6da19008bd496333cbefea8ef280666e065f34fb852531b14ec0793fdc869f89a89dd7a235caa6c6b16cdcb00436929956c72c8842d16e79ae3727593b97d25a2eb4a95584201fd50c24086de9a19f74254a99fed4819b4bb5892e2e94157912ebbc5d7d4e99aebab4951d5d5a48543a029af0f5ffa93671a2991336bacd3c7831a989bd3de0491932d9fd3b65765d9d27ba5a39f07925238b535e284d40704be1301cece11db5ae566185eae96bdd933d5b2dd8f08a885b8a2a28739950dd5f1703ee492d03db2704dff19e8a01ae9b6ca3ecd366456802b91efb7ada2d1cf6ab8d2acb0a2d615a110c0c2c7e30f3f28f8", 0x1000, 0x40, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r2}, 0x10) [ 464.937007] audit: type=1804 audit(1545701847.034:98): pid=24103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/618/bus" dev="sda1" ino=16993 res=1 01:37:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x1) [ 465.004841] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 465.004841] program syz-executor2 not setting count and/or reply_len properly 01:37:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xd00, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:27 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400300, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/135, 0x18}], 0xffffe7e) 01:37:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000000)=0xd) 01:37:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000743ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, 0x0) 01:37:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xfffffffffffff000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) arch_prctl$ARCH_SET_GS(0x1001, 0x7fff) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xc8, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x9, @local, 0xe74}, @in6={0xa, 0x4e22, 0x101, @empty, 0x1b}, @in6={0xa, 0x4e20, 0x7ff, @mcast1, 0x425f2717}, @in6={0xa, 0x4e22, 0x200, @mcast1, 0x1}, @in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80000000}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x800, @remote, 0x6}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000280)=0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @loopback}}}, 0x84) 01:37:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 01:37:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000483ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xd000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 465.893082] audit: type=1804 audit(1545701847.994:99): pid=24163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/619/bus" dev="sda1" ino=16993 res=1 01:37:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) [ 466.095922] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 466.095922] program syz-executor2 not setting count and/or reply_len properly 01:37:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000004800003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 466.350146] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 466.350146] program syz-executor2 not setting count and/or reply_len properly 01:37:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x104) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000140), 0x0) 01:37:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x300, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)) 01:37:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000ae0000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 01:37:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x6d7, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100), 0x4) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 466.644505] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 466.644505] program syz-executor2 not setting count and/or reply_len properly 01:37:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x700, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000080003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 466.733508] audit: type=1804 audit(1545701848.834:100): pid=24218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/620/bus" dev="sda1" ino=16913 res=1 01:37:28 executing program 5: ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x80000) r1 = userfaultfd(0x80000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{0x7fffffff, 0x11}, {0x5}, 0xa6, 0x7}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000380)='syz0\x00') setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) lseek(r1, 0x0, 0x0) clock_settime(0x0, &(0x7f00000003c0)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="d9", 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) fanotify_init(0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x100) openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:37:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) fadvise64(r0, 0x0, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0xff) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xff19, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 466.881363] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 466.881363] program syz-executor2 not setting count and/or reply_len properly 01:37:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000ae3ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xe803000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = accept(r1, &(0x7f0000000180)=@un=@abs, &(0x7f0000000200)=0x80) recvfrom$ax25(r2, &(0x7f0000000240)=""/1, 0x1, 0x0, &(0x7f0000000280)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2, 0x3}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 467.067705] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 467.067705] program syz-executor2 not setting count and/or reply_len properly 01:37:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200000cfa00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 467.326636] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 467.326636] program syz-executor2 not setting count and/or reply_len properly 01:37:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 01:37:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xfffff000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x402080, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 467.682712] audit: type=1804 audit(1545701849.788:101): pid=24275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/621/bus" dev="sda1" ino=16913 res=1 01:37:29 executing program 5: ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x80000) r1 = userfaultfd(0x80000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000140)={{0x7fffffff, 0x11}, {0x5}, 0xa6, 0x7}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000380)='syz0\x00') setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) lseek(r1, 0x0, 0x0) clock_settime(0x0, &(0x7f00000003c0)) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="d9", 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) fanotify_init(0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x6, 0x100) openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 01:37:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43050000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000300003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x1, 0x30, "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", 0xf6, 0x101, 0x100, 0x0, 0x9, 0x7fffffff, 0xd11, 0x1}, r3}}, 0x120) 01:37:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x19ff0000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 467.869324] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 467.869324] program syz-executor2 not setting count and/or reply_len properly 01:37:30 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) ioprio_get$pid(0x2, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000200)=0x7) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x2cca}, 0x8) write(0xffffffffffffffff, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000020003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 468.096918] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 468.096918] program syz-executor2 not setting count and/or reply_len properly 01:37:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r7 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) ftruncate(r7, 0x8202) r8 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r7, r9, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r9, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r10 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000050c0)=0x14) bind$inet(r3, &(0x7f0000001c40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) 01:37:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000006003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) 01:37:30 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000240)={0x68, "883b617c4553c9f217d6e680b90a9d0f2388a46520dab8eb5368562907ff4429", 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r4 = fcntl$getown(r0, 0x9) prlimit64(r4, 0xd, &(0x7f0000000400)={0x1, 0x6}, &(0x7f0000000440)) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/135, 0x87}], 0x1) ioctl$int_out(r2, 0x2, &(0x7f0000000100)) syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x92, 0x101000) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000280)={0x0, @ctrl}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0) [ 468.472679] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 468.472679] program syz-executor2 not setting count and/or reply_len properly 01:37:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x100000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:30 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000004800003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) write(0xffffffffffffffff, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:30 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) [ 468.593353] audit: type=1804 audit(1545701850.690:102): pid=24328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/622/bus" dev="sda1" ino=16929 res=1 01:37:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x1400000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:31 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7d, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 01:37:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) 01:37:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000400003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xaffe000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8202) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r6, r8, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r9 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000050c0)=0x14) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000000)=0xd) 01:37:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xabfe, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) 01:37:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) 01:37:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000009003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x6000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 469.533951] audit: type=1804 audit(1545701851.630:103): pid=24376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/623/bus" dev="sda1" ino=17105 res=1 01:37:31 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000540)='security.selinux\x00', 0x0, 0x0, 0x0) 01:37:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000007003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xe000000100000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:32 executing program 5: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000), 0x2ca, 0x0) 01:37:32 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8202) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r6, r8, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) fcntl$dupfd(r0, 0x0, r0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x29) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xd) 01:37:32 executing program 5: 01:37:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8847000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x101}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x8, 0x0, 0xdd, 0x101, 0x480000000000}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 470.322385] sg_write: 3 callbacks suppressed [ 470.322398] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 470.322398] program syz-executor2 not setting count and/or reply_len properly 01:37:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000068003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:32 executing program 5: [ 470.407613] audit: type=1804 audit(1545701852.500:104): pid=24415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/624/bus" dev="sda1" ino=17009 res=1 01:37:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x6000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:32 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1240000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@delqdisc={0xf4, 0x25, 0x220, 0x70bd2c, 0x25dfdbfc, {0x0, r3, {0x4, 0x3}, {0xf, 0xffe0}, {0xe, 0xd}}, [@TCA_RATE={0x8, 0x5, {0x0, 0x3ff}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @qdisc_kind_options=@q_gred={{0xc, 0x1, 'gred\x00'}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000000, 0x5, 0x9, 0x10, 0x48e, 0x5, 0x0, 0x7fff, 0x1f, 0x1, 0xd, 0x12, 0x19, 0x100000000, 0x8, 0x4}}]}}, @TCA_STAB={0x78, 0x8, [@TCA_STAB_BASE={0x1c, 0x1, {0x81, 0xbc81, 0x13, 0x5, 0x3, 0x25e, 0x2, 0x8}}, @TCA_STAB_DATA={0x14, 0x2, [0x80, 0x1, 0x1, 0x80000001, 0xfffffffffffffffc, 0xd13, 0x7fff]}, @TCA_STAB_BASE={0x1c, 0x1, {0x7fff, 0x4, 0x6, 0x101, 0x1, 0x100000001, 0x9, 0x9}}, @TCA_STAB_BASE={0x1c, 0x1, {0x65a8, 0x0, 0x0, 0x9, 0x1, 0x6, 0xfffffffffffff001, 0x5}}, @TCA_STAB_DATA={0xc, 0x2, [0x1, 0x2, 0x94e5]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000000) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/135, 0x23}], 0x1) [ 470.526543] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 470.526543] program syz-executor2 not setting count and/or reply_len properly 01:37:32 executing program 5: 01:37:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000000000b2f00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 470.665258] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO 01:37:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xb000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 470.801449] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 470.801449] program syz-executor2 not setting count and/or reply_len properly 01:37:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8202) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r6, r8, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) fcntl$dupfd(r0, 0x0, r0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xd) 01:37:33 executing program 0: 01:37:33 executing program 5: 01:37:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000300003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xd, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:33 executing program 5: [ 471.167242] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 471.167242] program syz-executor2 not setting count and/or reply_len properly 01:37:33 executing program 0: 01:37:33 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000500003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x4305, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 471.308468] audit: type=1804 audit(1545701853.400:105): pid=24468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/625/bus" dev="sda1" ino=17009 res=1 01:37:33 executing program 5: 01:37:33 executing program 0: [ 471.393893] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 471.393893] program syz-executor2 not setting count and/or reply_len properly 01:37:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x4788, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:34 executing program 5: 01:37:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000002900003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:34 executing program 0: 01:37:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r6 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) ftruncate(r6, 0x8202) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r6, r8, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000004fc0)=0x400, 0x4) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xd) 01:37:34 executing program 5: 01:37:34 executing program 0: [ 472.075464] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 472.075464] program syz-executor2 not setting count and/or reply_len properly 01:37:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xf0ffffffffffff, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000700003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:34 executing program 0: [ 472.209449] audit: type=1804 audit(1545701854.300:106): pid=24501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/626/bus" dev="sda1" ino=17841 res=1 01:37:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:34 executing program 5: 01:37:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xaffe0000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 472.379288] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 472.379288] program syz-executor2 not setting count and/or reply_len properly 01:37:34 executing program 0: 01:37:34 executing program 5: 01:37:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000007a00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 472.650154] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 472.650154] program syz-executor2 not setting count and/or reply_len properly 01:37:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8202) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r5, r7, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000005100)='trusted.overlay.origin\x00', &(0x7f0000005140)='y\x00', 0x2, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xd) 01:37:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x40000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:35 executing program 0: 01:37:35 executing program 5: 01:37:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000006c003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:35 executing program 0: [ 472.992739] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 472.992739] program syz-executor2 not setting count and/or reply_len properly 01:37:35 executing program 5: 01:37:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x88470000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:35 executing program 0: 01:37:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000000d003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:35 executing program 5: [ 473.150207] audit: type=1804 audit(1545701855.240:107): pid=24551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/627/bus" dev="sda1" ino=17902 res=1 [ 473.297743] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 473.297743] program syz-executor2 not setting count and/or reply_len properly 01:37:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r5 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) ftruncate(r5, 0x8202) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r6, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r5, r7, 0x0, 0x8000fffffffb) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'skbedit\x00'}}, 0xfffffe49) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xd) 01:37:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8060000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:35 executing program 0: 01:37:35 executing program 5: 01:37:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000048003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:36 executing program 5: 01:37:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xffffdd86, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:36 executing program 0: 01:37:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000007400003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:36 executing program 0: 01:37:36 executing program 5: [ 474.102498] audit: type=1804 audit(1545701856.200:108): pid=24588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/628/bus" dev="sda1" ino=17916 res=1 01:37:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000006800003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x14, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:36 executing program 0: 01:37:36 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_xen(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='9p\x00', 0x0, 0x0) 01:37:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) sendfile(r4, r6, 0x0, 0x8000fffffffb) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xd) 01:37:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10ef1e00000000347d231f0f1ea27e7c2996"], 0x12) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') fcntl$setown(r1, 0x8, r2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x8) sendfile(r1, r1, &(0x7f0000000380), 0x8080fffffffe) r3 = getpid() sched_setattr(r3, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000280)={0x43, 0x9, 0x0, {0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0x43) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000300)={0x0, 0x0, 0xb3, 0xfffffffffffffffd}) recvmmsg(r4, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{0x0, 0x0, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) ptrace$peekuser(0x3, r2, 0xffff) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x0, 0x1}, 0x18) setxattr$security_capability(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x0, 0x10001}]}, 0xc, 0x3) creat(&(0x7f0000000100)='./file1\x00', 0x0) creat(0x0, 0x104) rename(&(0x7f0000000000)='./file1\x00', 0x0) 01:37:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000004c00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x600000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000001bc0)=[{&(0x7f0000000900)}], 0x1, 0x0) [ 475.052858] audit: type=1804 audit(1545701857.150:109): pid=24624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/629/bus" dev="sda1" ino=17903 res=1 01:37:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000ae00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x80350000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 01:37:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x800e, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 475.429443] sg_write: 4 callbacks suppressed [ 475.429456] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 475.429456] program syz-executor2 not setting count and/or reply_len properly 01:37:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000029003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 475.695840] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 475.695840] program syz-executor2 not setting count and/or reply_len properly 01:37:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8100000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x0, r2}) close(r1) 01:37:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) 01:37:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000007a003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x7000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 476.011622] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 476.011622] program syz-executor2 not setting count and/or reply_len properly 01:37:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000cfa003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 476.111255] audit: type=1804 audit(1545701858.200:110): pid=24692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/630/bus" dev="sda1" ino=17894 res=1 01:37:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xe8030000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 476.219851] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 476.219851] program syz-executor2 not setting count and/or reply_len properly 01:37:38 executing program 5 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000005003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x0, r2}) close(r1) 01:37:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x543, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x700000000000000, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 476.561142] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 476.561142] program syz-executor2 not setting count and/or reply_len properly [ 476.632624] FAULT_INJECTION: forcing a failure. [ 476.632624] name failslab, interval 1, probability 0, space 0, times 0 [ 476.661847] CPU: 0 PID: 24729 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 476.668804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.678162] Call Trace: [ 476.680769] dump_stack+0x1d3/0x2c6 [ 476.684424] ? dump_stack_print_info.cold.1+0x20/0x20 [ 476.684456] should_fail.cold.4+0xa/0x17 [ 476.684478] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 476.684502] ? check_preemption_disabled+0x48/0x280 [ 476.693742] ? print_usage_bug+0xc0/0xc0 [ 476.693759] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 476.693777] ? graph_lock+0x270/0x270 [ 476.693794] ? graph_lock+0x270/0x270 [ 476.693812] ? __lock_acquire+0x62f/0x4c20 [ 476.693837] ? find_held_lock+0x36/0x1c0 [ 476.729479] ? __lock_is_held+0xb5/0x140 [ 476.733586] ? ___might_sleep+0x1ed/0x300 [ 476.737754] ? arch_local_save_flags+0x40/0x40 [ 476.742358] ? arch_local_save_flags+0x40/0x40 [ 476.746983] ? avc_has_perm_noaudit+0x424/0x630 [ 476.751677] __should_failslab+0x124/0x180 [ 476.755931] should_failslab+0x9/0x14 [ 476.759751] kmem_cache_alloc_node_trace+0x270/0x740 [ 476.764840] ? rtnl_lock+0x17/0x20 [ 476.768377] __kmalloc_node+0x3c/0x70 [ 476.772167] kvmalloc_node+0x65/0xf0 [ 476.775871] alloc_netdev_mqs+0x17b/0xfe0 [ 476.780005] ? number+0x972/0xca0 01:37:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) 01:37:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d02000000fa0c003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x0, r2}) close(r1) [ 476.783524] ? sl_free_netdev+0x70/0x70 [ 476.787528] ? free_netdev+0x450/0x450 [ 476.791421] ? put_dec+0xf0/0xf0 [ 476.794777] ? format_decode+0x1b2/0xaf0 [ 476.798841] ? enable_ptr_key_workfn+0x30/0x30 [ 476.803454] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 476.809025] ? vsnprintf+0x20d/0x1b60 [ 476.812856] ? pointer+0x900/0x900 [ 476.816408] ? do_syscall_64+0x1b9/0x820 [ 476.820492] ? sprintf+0xb0/0xe0 [ 476.823887] ? scnprintf+0x130/0x130 [ 476.827630] ? sl_uninit+0x20/0x20 [ 476.831193] slip_open+0x3ef/0x1107 [ 476.834831] ? trace_hardirqs_on+0xbd/0x310 [ 476.839165] ? n_hdlc_tty_close+0x2e6/0x360 [ 476.843525] ? sl_uninit+0x20/0x20 [ 476.847127] ? down_write_nested+0x130/0x130 [ 476.851543] ? down_read+0x120/0x120 [ 476.851563] ? sl_uninit+0x20/0x20 [ 476.851581] tty_ldisc_open.isra.1+0x8b/0xe0 [ 476.851599] tty_set_ldisc+0x2dc/0x6a0 [ 476.851622] tty_ioctl+0x39d/0x17d0 [ 476.851642] ? tty_vhangup+0x30/0x30 [ 476.863309] ? avc_has_extended_perms+0xab2/0x15a0 [ 476.879439] ? avc_ss_reset+0x190/0x190 [ 476.883442] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 476.888386] ? kasan_check_read+0x11/0x20 [ 476.892551] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 476.897874] ? rcu_softirq_qs+0x20/0x20 [ 476.901911] ? ___might_sleep+0x1ed/0x300 [ 476.906068] ? arch_local_save_flags+0x40/0x40 [ 476.910656] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 476.915623] ? tty_vhangup+0x30/0x30 [ 476.919424] do_vfs_ioctl+0x1de/0x1790 [ 476.923332] ? ioctl_preallocate+0x300/0x300 [ 476.927743] ? selinux_file_mprotect+0x620/0x620 [ 476.932491] ? __sb_end_write+0xd9/0x110 [ 476.936553] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 476.942158] ? fput+0x130/0x1a0 [ 476.945437] ? do_syscall_64+0x9a/0x820 [ 476.949428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 476.954964] ? security_file_ioctl+0x94/0xc0 [ 476.959375] ksys_ioctl+0xa9/0xd0 [ 476.962832] __x64_sys_ioctl+0x73/0xb0 [ 476.966717] do_syscall_64+0x1b9/0x820 [ 476.970618] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 476.975995] ? syscall_return_slowpath+0x5e0/0x5e0 [ 476.980936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 476.985795] ? trace_hardirqs_on_caller+0x310/0x310 [ 476.990828] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 476.995863] ? prepare_exit_to_usermode+0x291/0x3b0 [ 477.000896] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.005760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 477.010955] RIP: 0033:0x457759 [ 477.014160] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.015078] audit: type=1804 audit(1545701858.760:111): pid=24747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/631/bus" dev="sda1" ino=17931 res=1 [ 477.033067] RSP: 002b:00007fc7e19f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.033083] RAX: ffffffffffffffda RBX: 00007fc7e19f2c90 RCX: 0000000000457759 [ 477.033094] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 01:37:39 executing program 5 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) [ 477.033103] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 477.033128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19f36d4 [ 477.033137] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 [ 477.104493] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 477.104493] program syz-executor2 not setting count and/or reply_len properly 01:37:39 executing program 0 (fault-call:4 fault-nth:0): move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:37:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x19ff, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000900003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 477.259904] FAULT_INJECTION: forcing a failure. [ 477.259904] name failslab, interval 1, probability 0, space 0, times 0 [ 477.322826] CPU: 0 PID: 24756 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 477.329810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.339182] Call Trace: [ 477.341814] dump_stack+0x1d3/0x2c6 [ 477.345439] ? dump_stack_print_info.cold.1+0x20/0x20 [ 477.350618] ? find_held_lock+0x36/0x1c0 [ 477.354687] should_fail.cold.4+0xa/0x17 [ 477.358763] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 477.363914] ? kasan_check_read+0x11/0x20 [ 477.368065] ? do_raw_spin_unlock+0xa7/0x330 [ 477.372471] ? do_raw_spin_trylock+0x270/0x270 [ 477.377084] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 477.382025] ? graph_lock+0x270/0x270 [ 477.385832] ? wait_for_completion+0x8a0/0x8a0 [ 477.390420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.395963] ? check_preemption_disabled+0x48/0x280 [ 477.400969] ? __lock_is_held+0xb5/0x140 [ 477.405043] __should_failslab+0x124/0x180 [ 477.409280] should_failslab+0x9/0x14 [ 477.410214] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 477.410214] program syz-executor2 not setting count and/or reply_len properly [ 477.413085] kmem_cache_alloc_trace+0x4b/0x750 [ 477.413116] __hw_addr_create_ex+0xb2/0x3f0 [ 477.413133] ? dev_mc_init+0x170/0x170 [ 477.413160] __hw_addr_add_ex+0x1ef/0x2b0 [ 477.413181] dev_addr_init+0x169/0x260 [ 477.413209] ? __hw_addr_add_ex+0x2b0/0x2b0 [ 477.454048] ? kasan_unpoison_shadow+0x35/0x50 [ 477.458617] ? kasan_kmalloc+0xc7/0xe0 [ 477.462533] ? __kmalloc_node+0x50/0x70 [ 477.466523] alloc_netdev_mqs+0x21b/0xfe0 [ 477.470676] ? number+0x972/0xca0 [ 477.474117] ? sl_free_netdev+0x70/0x70 [ 477.478099] ? free_netdev+0x450/0x450 [ 477.482021] ? put_dec+0xf0/0xf0 [ 477.485398] ? format_decode+0x1b2/0xaf0 [ 477.489486] ? enable_ptr_key_workfn+0x30/0x30 [ 477.494086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 477.499632] ? vsnprintf+0x20d/0x1b60 [ 477.503449] ? pointer+0x900/0x900 [ 477.506989] ? do_syscall_64+0x1b9/0x820 [ 477.511072] ? sprintf+0xb0/0xe0 [ 477.514465] ? scnprintf+0x130/0x130 [ 477.518216] ? sl_uninit+0x20/0x20 [ 477.521758] slip_open+0x3ef/0x1107 [ 477.525399] ? trace_hardirqs_on+0xbd/0x310 [ 477.529729] ? n_hdlc_tty_close+0x2e6/0x360 [ 477.534052] ? sl_uninit+0x20/0x20 [ 477.537602] ? down_write_nested+0x130/0x130 [ 477.542010] ? down_read+0x120/0x120 [ 477.545736] ? sl_uninit+0x20/0x20 [ 477.549292] tty_ldisc_open.isra.1+0x8b/0xe0 [ 477.553700] tty_set_ldisc+0x2dc/0x6a0 [ 477.557586] tty_ioctl+0x39d/0x17d0 [ 477.561210] ? tty_vhangup+0x30/0x30 [ 477.564920] ? avc_has_extended_perms+0xab2/0x15a0 [ 477.569865] ? avc_ss_reset+0x190/0x190 [ 477.573843] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 477.578781] ? kasan_check_read+0x11/0x20 [ 477.582936] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 477.588212] ? rcu_softirq_qs+0x20/0x20 [ 477.592202] ? ___might_sleep+0x1ed/0x300 [ 477.596376] ? arch_local_save_flags+0x40/0x40 [ 477.600970] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 477.605917] ? tty_vhangup+0x30/0x30 [ 477.609632] do_vfs_ioctl+0x1de/0x1790 [ 477.613530] ? ioctl_preallocate+0x300/0x300 [ 477.617954] ? selinux_file_mprotect+0x620/0x620 [ 477.622722] ? __sb_end_write+0xd9/0x110 [ 477.626785] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 477.632307] ? fput+0x130/0x1a0 [ 477.635575] ? do_syscall_64+0x9a/0x820 [ 477.639539] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.645070] ? security_file_ioctl+0x94/0xc0 [ 477.649480] ksys_ioctl+0xa9/0xd0 [ 477.652933] __x64_sys_ioctl+0x73/0xb0 [ 477.656834] do_syscall_64+0x1b9/0x820 [ 477.660715] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 477.666106] ? syscall_return_slowpath+0x5e0/0x5e0 [ 477.671035] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.675890] ? trace_hardirqs_on_caller+0x310/0x310 [ 477.680945] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 477.685990] ? prepare_exit_to_usermode+0x291/0x3b0 [ 477.691050] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.695894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 477.701070] RIP: 0033:0x457759 [ 477.704258] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.723143] RSP: 002b:00007fc7e19f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.730839] RAX: ffffffffffffffda RBX: 00007fc7e19f2c90 RCX: 0000000000457759 [ 477.738113] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 [ 477.745386] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 477.752654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19f36d4 [ 477.759916] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 01:37:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) 01:37:39 executing program 5 (fault-call:4 fault-nth:2): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) [ 477.778921] FAULT_INJECTION: forcing a failure. [ 477.778921] name failslab, interval 1, probability 0, space 0, times 0 [ 477.857286] CPU: 1 PID: 24762 Comm: syz-executor0 Not tainted 4.20.0 #167 [ 477.864271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.873630] Call Trace: [ 477.876245] dump_stack+0x1d3/0x2c6 [ 477.879893] ? dump_stack_print_info.cold.1+0x20/0x20 [ 477.885118] ? mark_held_locks+0x130/0x130 [ 477.889373] should_fail.cold.4+0xa/0x17 [ 477.889395] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 477.889414] ? dput.part.25+0x26d/0x790 [ 477.898604] ? graph_lock+0x270/0x270 [ 477.898623] ? graph_lock+0x270/0x270 [ 477.898652] ? find_held_lock+0x36/0x1c0 [ 477.910211] ? ___might_sleep+0x1ed/0x300 [ 477.910228] ? find_held_lock+0x36/0x1c0 [ 477.910258] ? arch_local_save_flags+0x40/0x40 [ 477.922527] __should_failslab+0x124/0x180 [ 477.922547] should_failslab+0x9/0x14 [ 477.922563] __kmalloc+0x2e0/0x770 [ 477.922578] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 477.922593] ? rcu_softirq_qs+0x20/0x20 [ 477.922608] ? rw_copy_check_uvector+0x364/0x3e0 [ 477.922626] rw_copy_check_uvector+0x364/0x3e0 [ 477.922645] ? __fget+0x4d1/0x740 [ 477.922666] import_iovec+0xc9/0x2d0 [ 477.931472] ? dup_iter+0x260/0x260 [ 477.931486] ? proc_cwd_link+0x1d0/0x1d0 [ 477.931508] vfs_readv+0xf5/0x1c0 [ 477.931543] ? compat_rw_copy_check_uvector+0x440/0x440 [ 477.938910] ? __fget_light+0x2e9/0x430 [ 477.938928] ? fget_raw+0x20/0x20 [ 477.938980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.948252] ? check_preemption_disabled+0x48/0x280 [ 477.957605] ? __sb_end_write+0xd9/0x110 [ 477.975882] do_preadv+0x1cc/0x280 01:37:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x60, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 477.975900] ? do_readv+0x310/0x310 [ 477.975916] ? __ia32_sys_read+0xb0/0xb0 [ 477.985260] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 477.985280] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 477.985300] __x64_sys_preadv+0x9a/0xf0 [ 477.985320] do_syscall_64+0x1b9/0x820 [ 477.985335] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 477.985352] ? syscall_return_slowpath+0x5e0/0x5e0 [ 477.985367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.985385] ? trace_hardirqs_on_caller+0x310/0x310 [ 477.985400] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 477.985419] ? prepare_exit_to_usermode+0x291/0x3b0 [ 477.985439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 477.999429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 477.999442] RIP: 0033:0x457759 [ 477.999459] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.999473] RSP: 002b:00007f7790ce1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 01:37:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000003003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:40 executing program 0 (fault-call:4 fault-nth:1): move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) [ 478.010676] RAX: ffffffffffffffda RBX: 00007f7790ce1c90 RCX: 0000000000457759 [ 478.010686] RDX: 000000000000000f RSI: 0000000020000100 RDI: 0000000000000003 [ 478.010696] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 478.010705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7790ce26d4 [ 478.010714] R13: 00000000004c3ef5 R14: 00000000004d7008 R15: 0000000000000006 [ 478.013212] audit: type=1804 audit(1545701860.110:112): pid=24776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/632/bus" dev="sda1" ino=17923 res=1 [ 478.182829] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 478.182829] program syz-executor2 not setting count and/or reply_len properly [ 478.203152] FAULT_INJECTION: forcing a failure. 01:37:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8848000000000000, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 478.203152] name failslab, interval 1, probability 0, space 0, times 0 [ 478.252629] CPU: 0 PID: 24783 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 478.259619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.268984] Call Trace: [ 478.271607] dump_stack+0x1d3/0x2c6 [ 478.275274] ? dump_stack_print_info.cold.1+0x20/0x20 [ 478.280492] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 478.285445] should_fail.cold.4+0xa/0x17 [ 478.289506] ? graph_lock+0x270/0x270 [ 478.291974] FAULT_INJECTION: forcing a failure. [ 478.291974] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 478.293345] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 478.293370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.293399] ? check_preemption_disabled+0x48/0x280 [ 478.320837] ? graph_lock+0x270/0x270 [ 478.324657] ? find_held_lock+0x36/0x1c0 [ 478.328749] ? __lock_is_held+0xb5/0x140 [ 478.332848] ? ___might_sleep+0x1ed/0x300 [ 478.337048] ? arch_local_save_flags+0x40/0x40 [ 478.341696] __should_failslab+0x124/0x180 [ 478.345961] should_failslab+0x9/0x14 [ 478.349769] kmem_cache_alloc_node_trace+0x270/0x740 [ 478.354885] ? __hw_addr_add_ex+0x2b0/0x2b0 [ 478.359231] ? kasan_unpoison_shadow+0x35/0x50 [ 478.363856] __kmalloc_node+0x3c/0x70 [ 478.367668] kvmalloc_node+0x65/0xf0 [ 478.371397] alloc_netdev_mqs+0x85a/0xfe0 [ 478.375583] ? number+0x972/0xca0 [ 478.379064] ? sl_free_netdev+0x70/0x70 [ 478.383057] ? free_netdev+0x450/0x450 [ 478.386984] ? put_dec+0xf0/0xf0 [ 478.390360] ? format_decode+0x1b2/0xaf0 [ 478.394447] ? enable_ptr_key_workfn+0x30/0x30 [ 478.399049] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 478.404600] ? vsnprintf+0x20d/0x1b60 [ 478.408415] ? pointer+0x900/0x900 [ 478.411973] ? sprintf+0xb0/0xe0 [ 478.415347] ? scnprintf+0x130/0x130 [ 478.419122] ? sl_uninit+0x20/0x20 [ 478.422780] slip_open+0x3ef/0x1107 [ 478.426424] ? trace_hardirqs_on+0xbd/0x310 [ 478.430757] ? n_hdlc_tty_close+0x2e6/0x360 [ 478.435112] ? sl_uninit+0x20/0x20 [ 478.438676] ? down_write_nested+0x130/0x130 [ 478.443095] ? down_read+0x120/0x120 [ 478.446825] ? sl_uninit+0x20/0x20 [ 478.450372] tty_ldisc_open.isra.1+0x8b/0xe0 [ 478.454796] tty_set_ldisc+0x2dc/0x6a0 [ 478.458701] tty_ioctl+0x39d/0x17d0 [ 478.462371] ? tty_vhangup+0x30/0x30 [ 478.466097] ? avc_has_extended_perms+0xab2/0x15a0 [ 478.471068] ? avc_ss_reset+0x190/0x190 [ 478.475052] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 478.480006] ? kasan_check_read+0x11/0x20 [ 478.484163] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 478.489450] ? rcu_softirq_qs+0x20/0x20 [ 478.493456] ? ___might_sleep+0x1ed/0x300 [ 478.497614] ? arch_local_save_flags+0x40/0x40 [ 478.502210] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 478.507165] ? tty_vhangup+0x30/0x30 [ 478.510894] do_vfs_ioctl+0x1de/0x1790 [ 478.514795] ? ioctl_preallocate+0x300/0x300 [ 478.519233] ? selinux_file_mprotect+0x620/0x620 [ 478.524041] ? __sb_end_write+0xd9/0x110 [ 478.528150] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 478.533714] ? fput+0x130/0x1a0 [ 478.537001] ? do_syscall_64+0x9a/0x820 [ 478.540989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.546540] ? security_file_ioctl+0x94/0xc0 [ 478.550961] ksys_ioctl+0xa9/0xd0 [ 478.554441] __x64_sys_ioctl+0x73/0xb0 [ 478.558342] do_syscall_64+0x1b9/0x820 [ 478.562248] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 478.567625] ? syscall_return_slowpath+0x5e0/0x5e0 [ 478.572570] ? trace_hardirqs_on_caller+0x310/0x310 [ 478.577597] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 478.582620] ? recalc_sigpending_tsk+0x180/0x180 [ 478.587406] ? __switch_to_asm+0x40/0x70 [ 478.591468] ? __switch_to_asm+0x34/0x70 [ 478.595550] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 478.600410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 478.605607] RIP: 0033:0x457759 [ 478.608812] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.627728] RSP: 002b:00007fc7e19d1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 478.635447] RAX: ffffffffffffffda RBX: 00007fc7e19d1c90 RCX: 0000000000457759 [ 478.642720] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 [ 478.649997] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 478.657275] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19d26d4 [ 478.664551] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 [ 478.671860] CPU: 1 PID: 24791 Comm: syz-executor0 Not tainted 4.20.0 #167 [ 478.678824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.688198] Call Trace: [ 478.690831] dump_stack+0x1d3/0x2c6 [ 478.694497] ? dump_stack_print_info.cold.1+0x20/0x20 [ 478.699705] should_fail.cold.4+0xa/0x17 01:37:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000600003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 478.703791] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 478.708956] ? print_usage_bug+0xc0/0xc0 [ 478.713311] __alloc_pages_nodemask+0x366/0xea0 [ 478.718004] ? __alloc_pages_slowpath+0x2df0/0x2df0 [ 478.723063] ? print_usage_bug+0xc0/0xc0 [ 478.727133] ? print_usage_bug+0xc0/0xc0 [ 478.731234] ? check_noncircular+0x20/0x20 [ 478.735532] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 478.741082] ? pud_huge+0xc1/0x110 [ 478.741113] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 478.741113] program syz-executor2 not setting count and/or reply_len properly [ 478.744635] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 478.744655] alloc_pages_vma+0x3a0/0x540 [ 478.744681] do_huge_pmd_anonymous_page+0x56b/0x17e0 [ 478.744708] ? __thp_get_unmapped_area+0x180/0x180 [ 478.744727] ? mark_held_locks+0x130/0x130 [ 478.744750] ? follow_page_pte+0x1ab0/0x1ab0 [ 478.744771] ? pud_val+0x88/0x100 [ 478.744785] ? pmd_val+0x100/0x100 [ 478.744799] ? follow_page_pte+0x1ab0/0x1ab0 [ 478.744813] ? is_bpf_text_address+0xac/0x170 [ 478.744840] __handle_mm_fault+0x3ab0/0x5670 [ 478.809133] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 478.814002] ? graph_lock+0x270/0x270 [ 478.817823] ? print_usage_bug+0xc0/0xc0 [ 478.821893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.827433] ? graph_lock+0x270/0x270 [ 478.831233] ? graph_lock+0x270/0x270 [ 478.835062] ? handle_mm_fault+0x42a/0xc70 [ 478.839303] ? lock_downgrade+0x900/0x900 [ 478.843897] ? check_preemption_disabled+0x48/0x280 [ 478.848917] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 478.853865] ? kasan_check_read+0x11/0x20 [ 478.858022] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 478.863321] ? rcu_softirq_qs+0x20/0x20 [ 478.867297] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 478.872764] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 478.878319] ? check_preemption_disabled+0x48/0x280 [ 478.883360] handle_mm_fault+0x54f/0xc70 [ 478.887436] ? __handle_mm_fault+0x5670/0x5670 [ 478.892025] ? find_vma+0x34/0x190 [ 478.895606] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 478.900630] __get_user_pages+0xa3d/0x1e90 [ 478.904887] ? follow_page_mask+0x2050/0x2050 [ 478.909389] ? print_usage_bug+0xc0/0xc0 [ 478.913468] ? check_noncircular+0x20/0x20 [ 478.917730] ? lock_acquire+0x1ed/0x520 [ 478.921705] ? get_user_pages_unlocked+0xfd/0x5d0 [ 478.926562] ? lock_release+0xa00/0xa00 [ 478.930549] ? arch_local_save_flags+0x40/0x40 [ 478.935141] ? __lock_acquire+0x62f/0x4c20 [ 478.939421] ? down_read+0x8d/0x120 [ 478.943067] ? get_user_pages_unlocked+0xfd/0x5d0 [ 478.947956] ? __down_interruptible+0x700/0x700 [ 478.952638] ? __writepage+0xe0/0xe0 [ 478.956362] get_user_pages_unlocked+0x2fc/0x5d0 [ 478.961133] ? get_user_pages_longterm+0x650/0x650 [ 478.966065] ? get_user_pages_fast+0x22b/0x450 [ 478.970648] ? get_user_pages_fast+0x22b/0x450 [ 478.975250] get_user_pages_fast+0x322/0x450 [ 478.979666] ? __get_user_pages_fast+0x3f0/0x3f0 [ 478.984441] ? wake_up_page_bit+0x6f0/0x6f0 [ 478.988771] iov_iter_get_pages+0x49f/0x12a0 [ 478.993311] ? __get_user_pages_fast+0x3f0/0x3f0 [ 478.998081] ? csum_and_copy_to_iter+0x1b60/0x1b60 [ 479.003029] ? set_page_dirty_lock+0x121/0x190 [ 479.007615] ? tag_pages_for_writeback+0x7d0/0x7d0 [ 479.012548] ? unlock_request.part.14+0x7c/0x90 [ 479.017221] ? lock_downgrade+0x900/0x900 [ 479.021391] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 479.026932] ? fuse_copy_finish+0xf5/0x510 [ 479.031172] ? flush_bg_queue+0x660/0x660 [ 479.035330] ? __lock_acquire+0x62f/0x4c20 [ 479.039572] ? _raw_spin_unlock+0x2c/0x50 [ 479.043775] fuse_copy_fill+0x6ca/0xa20 [ 479.047786] ? fuse_copy_finish+0x510/0x510 [ 479.052111] ? _raw_spin_unlock+0x2c/0x50 [ 479.056268] ? memcpy+0x45/0x50 [ 479.059589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.065132] ? fuse_copy_do+0x286/0x440 [ 479.069113] fuse_copy_one+0xf0/0x190 [ 479.072931] ? fuse_copy_fill+0xa20/0xa20 [ 479.077087] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.082628] ? fuse_copy_do+0x286/0x440 [ 479.086635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.092193] ? fuse_copy_one+0x134/0x190 [ 479.096269] fuse_copy_args+0xa0/0x3a0 [ 479.100168] ? print_usage_bug+0xc0/0xc0 [ 479.104249] fuse_dev_do_read.isra.29+0x1066/0x19d0 [ 479.109287] ? fuse_dev_release+0x6e0/0x6e0 [ 479.113646] ? __lock_acquire+0x62f/0x4c20 [ 479.117887] ? lock_downgrade+0x900/0x900 [ 479.122053] ? check_preemption_disabled+0x48/0x280 [ 479.127092] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 479.132041] ? kasan_check_read+0x11/0x20 [ 479.136228] ? mark_held_locks+0x130/0x130 [ 479.140499] ? is_bpf_text_address+0xd3/0x170 [ 479.145026] ? kernel_text_address+0x79/0xf0 [ 479.149436] ? __kernel_text_address+0xd/0x40 [ 479.153949] ? unwind_get_return_address+0x61/0xa0 [ 479.158901] ? kasan_kmalloc+0xc7/0xe0 [ 479.162795] ? __kmalloc+0x15b/0x770 [ 479.166524] ? rw_copy_check_uvector+0x364/0x3e0 [ 479.171284] ? graph_lock+0x270/0x270 [ 479.175085] ? __x64_sys_preadv+0x9a/0xf0 [ 479.179246] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.184629] ? find_held_lock+0x36/0x1c0 [ 479.188699] ? find_held_lock+0x36/0x1c0 [ 479.192767] ? memset+0x31/0x40 [ 479.196070] fuse_dev_read+0x1a9/0x250 [ 479.199960] ? fuse_dev_splice_read+0x840/0x840 [ 479.204632] ? fsnotify+0x50e/0xef0 [ 479.208287] ? __fsnotify_parent+0xcc/0x430 [ 479.212615] ? __might_sleep+0x95/0x190 [ 479.216613] do_iter_readv_writev+0x77c/0xa80 [ 479.221116] ? vfs_dedupe_file_range+0x700/0x700 [ 479.225899] ? rw_verify_area+0x118/0x360 [ 479.230072] do_iter_read+0x26e/0x650 [ 479.233879] ? dup_iter+0x260/0x260 [ 479.237507] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 479.242285] vfs_readv+0x175/0x1c0 [ 479.245832] ? compat_rw_copy_check_uvector+0x440/0x440 [ 479.251211] ? fget_raw+0x20/0x20 [ 479.254687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.260232] ? check_preemption_disabled+0x48/0x280 [ 479.265271] ? __sb_end_write+0xd9/0x110 [ 479.269346] do_preadv+0x1cc/0x280 [ 479.272890] ? do_readv+0x310/0x310 [ 479.276515] ? __ia32_sys_read+0xb0/0xb0 [ 479.280582] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.285956] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 479.291417] __x64_sys_preadv+0x9a/0xf0 [ 479.295398] do_syscall_64+0x1b9/0x820 [ 479.299285] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 479.304654] ? syscall_return_slowpath+0x5e0/0x5e0 [ 479.309591] ? trace_hardirqs_on_caller+0x310/0x310 [ 479.314619] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 479.319643] ? recalc_sigpending_tsk+0x180/0x180 [ 479.324408] ? __switch_to_asm+0x40/0x70 [ 479.328469] ? __switch_to_asm+0x34/0x70 [ 479.332551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.337404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.342595] RIP: 0033:0x457759 [ 479.345809] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 479.364715] RSP: 002b:00007f7790cc0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 479.372444] RAX: ffffffffffffffda RBX: 00007f7790cc0c90 RCX: 0000000000457759 [ 479.379715] RDX: 000000000000000f RSI: 0000000020000100 RDI: 0000000000000003 [ 479.386981] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 479.394259] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7790cc16d4 01:37:41 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f0000002f80)=@un=@abs, 0x80, 0x0, 0x0, &(0x7f0000005040)=ANY=[@ANYBLOB="10"], 0x1}}], 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) [ 479.401530] R13: 00000000004c3ef5 R14: 00000000004d7008 R15: 0000000000000006 01:37:41 executing program 5 (fault-call:4 fault-nth:3): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8035, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:41 executing program 0: move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xf, 0x0) 01:37:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000006c00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 479.583926] FAULT_INJECTION: forcing a failure. [ 479.583926] name failslab, interval 1, probability 0, space 0, times 0 [ 479.612787] CPU: 0 PID: 24807 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 479.619798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.629189] Call Trace: [ 479.631811] dump_stack+0x1d3/0x2c6 [ 479.631835] ? dump_stack_print_info.cold.1+0x20/0x20 [ 479.631857] ? __mutex_unlock_slowpath+0x43c/0x8c0 [ 479.631882] should_fail.cold.4+0xa/0x17 [ 479.645181] audit: type=1804 audit(1545701861.710:113): pid=24813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/633/bus" dev="sda1" ino=17904 res=1 [ 479.645656] ? graph_lock+0x270/0x270 [ 479.680160] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 479.685295] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.690850] ? check_preemption_disabled+0x48/0x280 [ 479.695891] ? graph_lock+0x270/0x270 [ 479.699725] ? find_held_lock+0x36/0x1c0 [ 479.703830] ? __lock_is_held+0xb5/0x140 [ 479.707929] ? ___might_sleep+0x1ed/0x300 [ 479.712093] ? arch_local_save_flags+0x40/0x40 [ 479.716684] __should_failslab+0x124/0x180 [ 479.720910] should_failslab+0x9/0x14 [ 479.724700] kmem_cache_alloc_node_trace+0x270/0x740 [ 479.729801] ? __hw_addr_add_ex+0x2b0/0x2b0 [ 479.734127] ? kasan_unpoison_shadow+0x35/0x50 [ 479.736474] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 479.736474] program syz-executor2 not setting count and/or reply_len properly [ 479.738715] __kmalloc_node+0x3c/0x70 [ 479.738735] kvmalloc_node+0x65/0xf0 [ 479.738753] alloc_netdev_mqs+0x85a/0xfe0 [ 479.738782] ? number+0x972/0xca0 [ 479.769668] ? sl_free_netdev+0x70/0x70 [ 479.773670] ? free_netdev+0x450/0x450 [ 479.777549] ? put_dec+0xf0/0xf0 [ 479.780905] ? format_decode+0x1b2/0xaf0 [ 479.784991] ? enable_ptr_key_workfn+0x30/0x30 [ 479.789600] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 479.795147] ? vsnprintf+0x20d/0x1b60 [ 479.798938] ? pointer+0x900/0x900 [ 479.802485] ? sprintf+0xb0/0xe0 [ 479.805852] ? scnprintf+0x130/0x130 [ 479.809567] ? sl_uninit+0x20/0x20 [ 479.813116] slip_open+0x3ef/0x1107 [ 479.816736] ? trace_hardirqs_on+0xbd/0x310 [ 479.821054] ? n_hdlc_tty_close+0x2e6/0x360 [ 479.825366] ? sl_uninit+0x20/0x20 [ 479.828901] ? down_write_nested+0x130/0x130 [ 479.833299] ? down_read+0x120/0x120 [ 479.837000] ? sl_uninit+0x20/0x20 [ 479.840534] tty_ldisc_open.isra.1+0x8b/0xe0 [ 479.845134] tty_set_ldisc+0x2dc/0x6a0 [ 479.849033] tty_ioctl+0x39d/0x17d0 [ 479.852648] ? tty_vhangup+0x30/0x30 [ 479.856364] ? avc_has_extended_perms+0xab2/0x15a0 [ 479.861287] ? avc_ss_reset+0x190/0x190 [ 479.865269] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 479.870210] ? kasan_check_read+0x11/0x20 [ 479.874369] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 479.879645] ? rcu_softirq_qs+0x20/0x20 [ 479.883663] ? ___might_sleep+0x1ed/0x300 [ 479.887842] ? arch_local_save_flags+0x40/0x40 [ 479.892425] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 479.897343] ? tty_vhangup+0x30/0x30 [ 479.901054] do_vfs_ioctl+0x1de/0x1790 [ 479.904946] ? ioctl_preallocate+0x300/0x300 [ 479.909345] ? selinux_file_mprotect+0x620/0x620 [ 479.914106] ? __sb_end_write+0xd9/0x110 [ 479.918172] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 479.923698] ? fput+0x130/0x1a0 [ 479.926978] ? do_syscall_64+0x9a/0x820 [ 479.930980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.936546] ? security_file_ioctl+0x94/0xc0 [ 479.940952] ksys_ioctl+0xa9/0xd0 [ 479.944416] __x64_sys_ioctl+0x73/0xb0 [ 479.948303] do_syscall_64+0x1b9/0x820 [ 479.952176] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 479.957535] ? syscall_return_slowpath+0x5e0/0x5e0 [ 479.962537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.967369] ? trace_hardirqs_on_caller+0x310/0x310 [ 479.972395] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 479.977471] ? prepare_exit_to_usermode+0x291/0x3b0 [ 479.982475] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.987316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.992492] RIP: 0033:0x457759 [ 479.995689] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 480.014601] RSP: 002b:00007fc7e19f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.022310] RAX: ffffffffffffffda RBX: 00007fc7e19f2c90 RCX: 0000000000457759 01:37:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 480.029577] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 [ 480.036867] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 480.044168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19f36d4 [ 480.051430] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 01:37:42 executing program 5 (fault-call:4 fault-nth:4): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xe803000000000000, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:42 executing program 0: move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x7ffff000}], 0xf, 0x0) 01:37:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000003000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 480.276257] FAULT_INJECTION: forcing a failure. [ 480.276257] name failslab, interval 1, probability 0, space 0, times 0 [ 480.291810] CPU: 1 PID: 24828 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 480.298804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.308159] Call Trace: [ 480.310760] dump_stack+0x1d3/0x2c6 [ 480.314425] ? dump_stack_print_info.cold.1+0x20/0x20 [ 480.319665] should_fail.cold.4+0xa/0x17 [ 480.323727] ? kernel_text_address+0x79/0xf0 [ 480.328124] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 480.333227] ? unwind_get_return_address+0x61/0xa0 [ 480.338172] ? __save_stack_trace+0x8d/0xf0 [ 480.342488] ? graph_lock+0x270/0x270 [ 480.346306] ? save_stack+0xa9/0xd0 [ 480.349937] ? find_held_lock+0x36/0x1c0 [ 480.354001] ? __lock_is_held+0xb5/0x140 [ 480.358081] ? ___might_sleep+0x1ed/0x300 [ 480.362249] ? arch_local_save_flags+0x40/0x40 [ 480.366855] __should_failslab+0x124/0x180 [ 480.371081] should_failslab+0x9/0x14 [ 480.374875] kmem_cache_alloc_node_trace+0x270/0x740 [ 480.379987] ? kasan_unpoison_shadow+0x35/0x50 [ 480.384564] ? __lockdep_init_map+0x105/0x590 [ 480.389042] __kmalloc_node+0x3c/0x70 [ 480.392838] kvmalloc_node+0x65/0xf0 [ 480.396554] alloc_netdev_mqs+0xa18/0xfe0 [ 480.400703] ? free_netdev+0x450/0x450 [ 480.404586] ? put_dec+0xf0/0xf0 [ 480.407939] ? format_decode+0x1b2/0xaf0 [ 480.411988] ? enable_ptr_key_workfn+0x30/0x30 [ 480.416585] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 480.422122] ? vsnprintf+0x20d/0x1b60 [ 480.425915] ? pointer+0x900/0x900 [ 480.429447] ? sprintf+0xb0/0xe0 [ 480.432799] ? scnprintf+0x130/0x130 [ 480.436501] ? sl_uninit+0x20/0x20 [ 480.440054] slip_open+0x3ef/0x1107 [ 480.443700] ? trace_hardirqs_on+0xbd/0x310 [ 480.448007] ? n_hdlc_tty_close+0x2e6/0x360 [ 480.452321] ? sl_uninit+0x20/0x20 [ 480.455850] ? down_write_nested+0x130/0x130 [ 480.460249] ? down_read+0x120/0x120 [ 480.463967] ? sl_uninit+0x20/0x20 [ 480.467543] tty_ldisc_open.isra.1+0x8b/0xe0 [ 480.471937] tty_set_ldisc+0x2dc/0x6a0 [ 480.475814] tty_ioctl+0x39d/0x17d0 [ 480.479428] ? tty_vhangup+0x30/0x30 [ 480.483126] ? avc_has_extended_perms+0xab2/0x15a0 [ 480.488061] ? avc_ss_reset+0x190/0x190 [ 480.492025] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 480.496953] ? kasan_check_read+0x11/0x20 [ 480.501113] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 480.506427] ? rcu_softirq_qs+0x20/0x20 [ 480.510425] ? ___might_sleep+0x1ed/0x300 [ 480.514559] ? arch_local_save_flags+0x40/0x40 [ 480.519127] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 480.524040] ? tty_vhangup+0x30/0x30 [ 480.527759] do_vfs_ioctl+0x1de/0x1790 [ 480.531651] ? ioctl_preallocate+0x300/0x300 [ 480.536074] ? selinux_file_mprotect+0x620/0x620 [ 480.540833] ? __sb_end_write+0xd9/0x110 [ 480.544881] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 480.550402] ? fput+0x130/0x1a0 [ 480.553670] ? do_syscall_64+0x9a/0x820 [ 480.557648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 480.563178] ? security_file_ioctl+0x94/0xc0 [ 480.567588] ksys_ioctl+0xa9/0xd0 [ 480.571054] __x64_sys_ioctl+0x73/0xb0 [ 480.574957] do_syscall_64+0x1b9/0x820 [ 480.578844] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 480.584194] ? syscall_return_slowpath+0x5e0/0x5e0 [ 480.589107] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.593939] ? trace_hardirqs_on_caller+0x310/0x310 [ 480.598944] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 480.603948] ? prepare_exit_to_usermode+0x291/0x3b0 [ 480.608965] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.613812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.618986] RIP: 0033:0x457759 [ 480.622203] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 480.641096] RSP: 002b:00007fc7e19f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.648797] RAX: ffffffffffffffda RBX: 00007fc7e19f2c90 RCX: 0000000000457759 [ 480.656062] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 [ 480.663314] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 480.670564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19f36d4 01:37:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) [ 480.677815] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 01:37:42 executing program 0: move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x1f8}], 0xf, 0x0) 01:37:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) 01:37:42 executing program 5 (fault-call:4 fault-nth:5): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000060003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x88caffff, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 480.918710] FAULT_INJECTION: forcing a failure. [ 480.918710] name failslab, interval 1, probability 0, space 0, times 0 [ 480.935651] CPU: 1 PID: 24851 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 480.942658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.952027] Call Trace: [ 480.954629] dump_stack+0x1d3/0x2c6 [ 480.958271] ? dump_stack_print_info.cold.1+0x20/0x20 [ 480.963473] ? __kernel_text_address+0xd/0x40 [ 480.967960] ? unwind_get_return_address+0x61/0xa0 [ 480.972893] should_fail.cold.4+0xa/0x17 [ 480.976957] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 480.982057] ? save_stack+0x43/0xd0 [ 480.985673] ? kasan_kmalloc+0xc7/0xe0 [ 480.989406] sg_write: 1 callbacks suppressed [ 480.989422] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 480.989422] program syz-executor2 not setting count and/or reply_len properly [ 480.989689] ? kmem_cache_alloc_trace+0x152/0x750 [ 480.989707] ? slip_open+0x8f1/0x1107 [ 480.989728] ? tty_ldisc_open.isra.1+0x8b/0xe0 [ 481.023193] ? graph_lock+0x270/0x270 [ 481.027018] ? ksys_ioctl+0xa9/0xd0 [ 481.030634] ? __x64_sys_ioctl+0x73/0xb0 [ 481.031908] audit: type=1804 audit(1545701863.110:114): pid=24864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/634/bus" dev="sda1" ino=17949 res=1 [ 481.034690] ? do_syscall_64+0x1b9/0x820 [ 481.034708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.034735] ? find_held_lock+0x36/0x1c0 [ 481.034758] ? __lock_is_held+0xb5/0x140 [ 481.034786] ? ___might_sleep+0x1ed/0x300 [ 481.034805] ? arch_local_save_flags+0x40/0x40 [ 481.087688] __should_failslab+0x124/0x180 [ 481.091944] should_failslab+0x9/0x14 [ 481.095808] kmem_cache_alloc_trace+0x2d7/0x750 [ 481.100482] ? __lockdep_init_map+0x105/0x590 [ 481.104985] slip_open+0x937/0x1107 [ 481.108602] ? trace_hardirqs_on+0xbd/0x310 [ 481.112914] ? sl_uninit+0x20/0x20 [ 481.116462] ? down_write_nested+0x130/0x130 [ 481.120873] ? down_read+0x120/0x120 [ 481.124588] ? sl_uninit+0x20/0x20 [ 481.128130] tty_ldisc_open.isra.1+0x8b/0xe0 [ 481.132536] tty_set_ldisc+0x2dc/0x6a0 [ 481.136441] tty_ioctl+0x39d/0x17d0 [ 481.140076] ? tty_vhangup+0x30/0x30 [ 481.143792] ? avc_has_extended_perms+0xab2/0x15a0 [ 481.148720] ? avc_ss_reset+0x190/0x190 [ 481.152696] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 481.157654] ? kasan_check_read+0x11/0x20 [ 481.161812] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 481.167090] ? rcu_softirq_qs+0x20/0x20 [ 481.171078] ? ___might_sleep+0x1ed/0x300 [ 481.175213] ? arch_local_save_flags+0x40/0x40 [ 481.179805] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 481.184753] ? tty_vhangup+0x30/0x30 [ 481.188470] do_vfs_ioctl+0x1de/0x1790 [ 481.192367] ? ioctl_preallocate+0x300/0x300 [ 481.196783] ? selinux_file_mprotect+0x620/0x620 [ 481.201546] ? __sb_end_write+0xd9/0x110 [ 481.205606] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 481.211155] ? fput+0x130/0x1a0 [ 481.214437] ? do_syscall_64+0x9a/0x820 [ 481.218405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 481.223942] ? security_file_ioctl+0x94/0xc0 [ 481.228372] ksys_ioctl+0xa9/0xd0 [ 481.231830] __x64_sys_ioctl+0x73/0xb0 [ 481.235729] do_syscall_64+0x1b9/0x820 [ 481.239606] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 481.244987] ? syscall_return_slowpath+0x5e0/0x5e0 [ 481.249915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 481.254804] ? trace_hardirqs_on_caller+0x310/0x310 [ 481.259809] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 481.264824] ? prepare_exit_to_usermode+0x291/0x3b0 [ 481.269848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 481.274720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.279894] RIP: 0033:0x457759 [ 481.283081] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.301989] RSP: 002b:00007fc7e19f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.309723] RAX: ffffffffffffffda RBX: 00007fc7e19f2c90 RCX: 0000000000457759 01:37:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000074003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 481.316993] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 [ 481.324282] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 481.331568] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19f36d4 [ 481.338830] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 01:37:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x700, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:43 executing program 0: move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x200000af}], 0xf, 0x0) 01:37:43 executing program 5 (fault-call:4 fault-nth:6): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) [ 481.470704] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 481.470704] program syz-executor2 not setting count and/or reply_len properly 01:37:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000d00003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:43 executing program 0: move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xc, 0x0) [ 481.625842] FAULT_INJECTION: forcing a failure. [ 481.625842] name failslab, interval 1, probability 0, space 0, times 0 [ 481.647317] CPU: 1 PID: 24877 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 481.654285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.663646] Call Trace: [ 481.666269] dump_stack+0x1d3/0x2c6 [ 481.669939] ? dump_stack_print_info.cold.1+0x20/0x20 [ 481.675151] ? __kernel_text_address+0xd/0x40 [ 481.675173] ? unwind_get_return_address+0x61/0xa0 [ 481.675198] should_fail.cold.4+0xa/0x17 [ 481.675218] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 481.675252] ? save_stack+0x43/0xd0 [ 481.675285] ? kasan_kmalloc+0xc7/0xe0 [ 481.675319] ? kmem_cache_alloc_trace+0x152/0x750 [ 481.675336] ? slip_open+0x8f1/0x1107 [ 481.675357] ? tty_ldisc_open.isra.1+0x8b/0xe0 [ 481.684777] ? graph_lock+0x270/0x270 [ 481.684795] ? ksys_ioctl+0xa9/0xd0 [ 481.684811] ? __x64_sys_ioctl+0x73/0xb0 [ 481.684828] ? do_syscall_64+0x1b9/0x820 [ 481.684845] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.684869] ? find_held_lock+0x36/0x1c0 [ 481.684890] ? __lock_is_held+0xb5/0x140 [ 481.743826] ? ___might_sleep+0x1ed/0x300 [ 481.747989] ? arch_local_save_flags+0x40/0x40 [ 481.752607] __should_failslab+0x124/0x180 [ 481.756876] should_failslab+0x9/0x14 [ 481.760691] kmem_cache_alloc_trace+0x2d7/0x750 [ 481.760715] ? __lockdep_init_map+0x105/0x590 [ 481.760743] slip_open+0x937/0x1107 [ 481.773565] ? trace_hardirqs_on+0xbd/0x310 [ 481.773590] ? sl_uninit+0x20/0x20 [ 481.773614] ? down_write_nested+0x130/0x130 [ 481.785869] ? down_read+0x120/0x120 [ 481.789606] ? sl_uninit+0x20/0x20 [ 481.793193] tty_ldisc_open.isra.1+0x8b/0xe0 [ 481.797618] tty_set_ldisc+0x2dc/0x6a0 [ 481.801526] tty_ioctl+0x39d/0x17d0 [ 481.805173] ? tty_vhangup+0x30/0x30 [ 481.808905] ? avc_has_extended_perms+0xab2/0x15a0 [ 481.813873] ? avc_ss_reset+0x190/0x190 [ 481.817885] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 481.822840] ? kasan_check_read+0x11/0x20 [ 481.827000] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 481.832296] ? rcu_softirq_qs+0x20/0x20 [ 481.836304] ? ___might_sleep+0x1ed/0x300 [ 481.840468] ? arch_local_save_flags+0x40/0x40 [ 481.845590] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 481.850541] ? tty_vhangup+0x30/0x30 [ 481.854295] do_vfs_ioctl+0x1de/0x1790 [ 481.858225] ? ioctl_preallocate+0x300/0x300 [ 481.862678] ? selinux_file_mprotect+0x620/0x620 [ 481.867467] ? __sb_end_write+0xd9/0x110 [ 481.871555] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 481.877105] ? fput+0x130/0x1a0 [ 481.880401] ? do_syscall_64+0x9a/0x820 [ 481.884429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 481.889978] ? security_file_ioctl+0x94/0xc0 [ 481.894417] ksys_ioctl+0xa9/0xd0 [ 481.897892] __x64_sys_ioctl+0x73/0xb0 [ 481.901798] do_syscall_64+0x1b9/0x820 [ 481.901933] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 481.901933] program syz-executor2 not setting count and/or reply_len properly [ 481.905697] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 481.905731] ? syscall_return_slowpath+0x5e0/0x5e0 [ 481.905746] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 481.905767] ? trace_hardirqs_on_caller+0x310/0x310 [ 481.905784] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 481.905815] ? prepare_exit_to_usermode+0x291/0x3b0 [ 481.951774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 481.956636] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 481.961831] RIP: 0033:0x457759 [ 481.965039] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.983950] RSP: 002b:00007fc7e19f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.991672] RAX: ffffffffffffffda RBX: 00007fc7e19f2c90 RCX: 0000000000457759 [ 481.998951] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 [ 482.006234] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 482.013547] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19f36d4 [ 482.020828] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 01:37:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x806000000000000, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) 01:37:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4305000000000000, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000000030003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:44 executing program 5 (fault-call:4 fault-nth:7): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:44 executing program 0: move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0xb, 0x0) [ 482.143367] audit: type=1804 audit(1545701864.240:115): pid=24899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir457020256/syzkaller.EbWagP/635/bus" dev="sda1" ino=17951 res=1 01:37:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x800e, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) [ 482.372314] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 482.372314] program syz-executor2 not setting count and/or reply_len properly [ 482.430310] FAULT_INJECTION: forcing a failure. [ 482.430310] name failslab, interval 1, probability 0, space 0, times 0 [ 482.460329] CPU: 0 PID: 24912 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 482.467298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.476682] Call Trace: [ 482.479308] dump_stack+0x1d3/0x2c6 [ 482.482950] ? dump_stack_print_info.cold.1+0x20/0x20 [ 482.488156] ? __kernel_text_address+0xd/0x40 [ 482.492664] ? unwind_get_return_address+0x61/0xa0 [ 482.497604] should_fail.cold.4+0xa/0x17 [ 482.501674] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 482.506802] ? save_stack+0x43/0xd0 [ 482.510435] ? kasan_kmalloc+0xc7/0xe0 [ 482.514331] ? kmem_cache_alloc_trace+0x152/0x750 [ 482.519187] ? slip_open+0x937/0x1107 [ 482.522988] ? tty_ldisc_open.isra.1+0x8b/0xe0 [ 482.527589] ? graph_lock+0x270/0x270 [ 482.531426] ? ksys_ioctl+0xa9/0xd0 [ 482.535060] ? __x64_sys_ioctl+0x73/0xb0 [ 482.539124] ? do_syscall_64+0x1b9/0x820 [ 482.543188] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 482.548566] ? find_held_lock+0x36/0x1c0 [ 482.552643] ? __lock_is_held+0xb5/0x140 [ 482.556737] ? ___might_sleep+0x1ed/0x300 [ 482.560911] ? arch_local_save_flags+0x40/0x40 [ 482.565523] __should_failslab+0x124/0x180 [ 482.569783] should_failslab+0x9/0x14 [ 482.573597] kmem_cache_alloc_trace+0x2d7/0x750 [ 482.578306] slip_open+0x97b/0x1107 [ 482.581962] ? sl_uninit+0x20/0x20 [ 482.585524] ? down_write_nested+0x130/0x130 [ 482.589941] ? down_read+0x120/0x120 [ 482.593662] ? sl_uninit+0x20/0x20 [ 482.597214] tty_ldisc_open.isra.1+0x8b/0xe0 [ 482.601640] tty_set_ldisc+0x2dc/0x6a0 [ 482.605562] tty_ioctl+0x39d/0x17d0 [ 482.609199] ? tty_vhangup+0x30/0x30 [ 482.612920] ? avc_has_extended_perms+0xab2/0x15a0 [ 482.617879] ? avc_ss_reset+0x190/0x190 [ 482.621868] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 482.626802] ? kasan_check_read+0x11/0x20 [ 482.630957] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 482.636277] ? rcu_softirq_qs+0x20/0x20 [ 482.640300] ? ___might_sleep+0x1ed/0x300 [ 482.644465] ? arch_local_save_flags+0x40/0x40 [ 482.649060] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 482.654005] ? tty_vhangup+0x30/0x30 [ 482.657733] do_vfs_ioctl+0x1de/0x1790 [ 482.661633] ? ioctl_preallocate+0x300/0x300 [ 482.666056] ? selinux_file_mprotect+0x620/0x620 [ 482.670819] ? __sb_end_write+0xd9/0x110 [ 482.674903] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 482.680443] ? fput+0x130/0x1a0 [ 482.683742] ? do_syscall_64+0x9a/0x820 [ 482.687727] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 482.693275] ? security_file_ioctl+0x94/0xc0 [ 482.697686] ksys_ioctl+0xa9/0xd0 [ 482.701147] __x64_sys_ioctl+0x73/0xb0 [ 482.705043] do_syscall_64+0x1b9/0x820 [ 482.708955] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 482.714564] ? syscall_return_slowpath+0x5e0/0x5e0 [ 482.719501] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 482.724378] ? trace_hardirqs_on_caller+0x310/0x310 [ 482.729409] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 482.734437] ? prepare_exit_to_usermode+0x291/0x3b0 [ 482.739491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 482.744379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 482.749573] RIP: 0033:0x457759 [ 482.752787] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 482.771722] RSP: 002b:00007fc7e19f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:37:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d0200000000ae003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) [ 482.779438] RAX: ffffffffffffffda RBX: 00007fc7e19f2c90 RCX: 0000000000457759 [ 482.786722] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 [ 482.793992] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 482.801269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19f36d4 [ 482.808549] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 01:37:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) [ 482.957280] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 482.957280] program syz-executor2 not setting count and/or reply_len properly 01:37:45 executing program 0: move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x4, 0x0) 01:37:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x19ff, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:45 executing program 5 (fault-call:4 fault-nth:8): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x1) 01:37:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000000)="b63db85e1e8d020000006000003ef00130cc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae", 0x2f) 01:37:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 01:37:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4000000000000000, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0xf}}}}}, 0x0) 01:37:45 executing program 0: move_pages(0x0, 0x29, &(0x7f0000000180)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/47, 0x2f}], 0x3, 0x0) [ 483.217108] FAULT_INJECTION: forcing a failure. [ 483.217108] name failslab, interval 1, probability 0, space 0, times 0 [ 483.265056] CPU: 1 PID: 24942 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 483.272006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.281389] Call Trace: [ 483.284024] dump_stack+0x1d3/0x2c6 [ 483.287678] ? dump_stack_print_info.cold.1+0x20/0x20 [ 483.292872] ? is_bpf_text_address+0xd3/0x170 [ 483.297374] should_fail.cold.4+0xa/0x17 [ 483.301450] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 483.306571] ? save_stack+0xa9/0xd0 [ 483.310231] ? graph_lock+0x270/0x270 [ 483.314052] ? save_stack+0x43/0xd0 [ 483.317687] ? kasan_kmalloc+0xc7/0xe0 [ 483.321591] ? kmem_cache_alloc_trace+0x152/0x750 [ 483.326448] ? slip_open+0x97b/0x1107 [ 483.330267] ? tty_ldisc_open.isra.1+0x8b/0xe0 [ 483.334867] ? tty_set_ldisc+0x2dc/0x6a0 [ 483.335211] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 483.335211] program syz-executor2 not setting count and/or reply_len properly [ 483.338953] ? tty_ioctl+0x39d/0x17d0 [ 483.338976] ? find_held_lock+0x36/0x1c0 [ 483.338998] ? __lock_is_held+0xb5/0x140 [ 483.339028] ? ___might_sleep+0x1ed/0x300 [ 483.370820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.376356] ? arch_local_save_flags+0x40/0x40 [ 483.380955] __should_failslab+0x124/0x180 [ 483.385211] should_failslab+0x9/0x14 [ 483.389043] kmem_cache_alloc_trace+0x2d7/0x750 [ 483.393705] ? slip_open+0x97b/0x1107 [ 483.397512] ? rcu_read_lock_sched_held+0x108/0x120 [ 483.402543] ? kmem_cache_alloc_trace+0x353/0x750 [ 483.407384] slhc_init+0xa8/0x53d [ 483.410852] slip_open+0x99b/0x1107 [ 483.414548] ? sl_uninit+0x20/0x20 [ 483.418108] ? down_write_nested+0x130/0x130 [ 483.422533] ? down_read+0x120/0x120 [ 483.426238] ? sl_uninit+0x20/0x20 [ 483.429777] tty_ldisc_open.isra.1+0x8b/0xe0 [ 483.434215] tty_set_ldisc+0x2dc/0x6a0 [ 483.438132] tty_ioctl+0x39d/0x17d0 [ 483.441754] ? tty_vhangup+0x30/0x30 [ 483.445454] ? avc_has_extended_perms+0xab2/0x15a0 [ 483.450393] ? avc_ss_reset+0x190/0x190 [ 483.454371] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 483.459306] ? kasan_check_read+0x11/0x20 [ 483.463461] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 483.468757] ? rcu_softirq_qs+0x20/0x20 [ 483.472755] ? ___might_sleep+0x1ed/0x300 [ 483.476896] ? arch_local_save_flags+0x40/0x40 [ 483.481466] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 483.486399] ? tty_vhangup+0x30/0x30 [ 483.490117] do_vfs_ioctl+0x1de/0x1790 [ 483.494288] ? ioctl_preallocate+0x300/0x300 [ 483.498717] ? selinux_file_mprotect+0x620/0x620 [ 483.503466] ? __sb_end_write+0xd9/0x110 [ 483.507518] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 483.513051] ? fput+0x130/0x1a0 [ 483.516339] ? do_syscall_64+0x9a/0x820 [ 483.520359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.525902] ? security_file_ioctl+0x94/0xc0 [ 483.530316] ksys_ioctl+0xa9/0xd0 [ 483.533779] __x64_sys_ioctl+0x73/0xb0 [ 483.537668] do_syscall_64+0x1b9/0x820 [ 483.541559] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 483.546920] ? syscall_return_slowpath+0x5e0/0x5e0 [ 483.551866] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 483.556714] ? trace_hardirqs_on_caller+0x310/0x310 [ 483.561736] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 483.566766] ? prepare_exit_to_usermode+0x291/0x3b0 [ 483.571794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 483.576655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.581846] RIP: 0033:0x457759 [ 483.585041] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 483.603940] RSP: 002b:00007fc7e19f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.611632] RAX: ffffffffffffffda RBX: 00007fc7e19f2c90 RCX: 0000000000457759 [ 483.618899] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 [ 483.626164] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 483.633439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19f36d4 [ 483.640704] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 [ 483.649137] BUG: unable to handle kernel paging request at fffffffffffffff4 [ 483.656273] PGD 946d067 P4D 946d067 PUD 946f067 PMD 0 [ 483.661564] Oops: 0000 [#1] PREEMPT SMP KASAN [ 483.666061] CPU: 1 PID: 24942 Comm: syz-executor5 Not tainted 4.20.0 #167 [ 483.672987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.682347] RIP: 0010:slhc_free+0x30/0xb0 [ 483.686483] Code: 53 48 89 fb e8 71 04 ad fc 48 85 db 74 74 e8 67 04 ad fc 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 69 <4c> 8b 23 4d 85 e4 74 0d e8 43 04 ad fc 4c 89 e7 e8 bb e1 ef fc e8 [ 483.705373] RSP: 0018:ffff88817ad6f770 EFLAGS: 00010246 [ 483.710728] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc9000fecd000 [ 483.717996] RDX: 1ffffffffffffffe RSI: ffffffff84d15439 RDI: fffffffffffffff4 [ 483.725258] RBP: ffff88817ad6f780 R08: ffff8881ad9bcbb0 R09: 0000000000000006 [ 483.732514] R10: 0000000000000000 R11: ffff8881ad9bc2c0 R12: 00000000ffffff97 [ 483.739768] R13: ffff88817a430240 R14: ffff8881acb5ea80 R15: ffff8881843f1640 [ 483.747059] FS: 00007fc7e19f3700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 483.755274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.761154] CR2: fffffffffffffff4 CR3: 00000001b06f9000 CR4: 00000000001406e0 [ 483.768408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 483.775660] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.782925] Call Trace: [ 483.785524] slip_open+0xdee/0x1107 [ 483.789180] ? sl_uninit+0x20/0x20 [ 483.792734] ? down_write_nested+0x130/0x130 [ 483.797161] ? down_read+0x120/0x120 [ 483.800884] ? sl_uninit+0x20/0x20 [ 483.803803] kobject: 'loop3' (000000008be44d72): kobject_uevent_env [ 483.804437] tty_ldisc_open.isra.1+0x8b/0xe0 01:37:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000004f40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004d00)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/85, 0x55}], 0x1, &(0x7f0000000440)=""/104, 0x68}, 0x3ff}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/73, 0x49}], 0x2, &(0x7f00000006c0)=""/162, 0xa2}, 0x10000}, {{&(0x7f0000000780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000800)=""/128, 0x80}, {&(0x7f0000000880)=""/50, 0x32}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/195, 0xc3}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/154, 0x9a}, {&(0x7f0000001c40)}], 0x8}, 0x5}, {{&(0x7f0000001d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/103, 0x67}, {&(0x7f0000001e00)=""/53, 0x35}, {&(0x7f0000001e40)=""/115, 0x73}], 0x3, &(0x7f0000001f00)=""/205, 0xcd}, 0x5}, {{&(0x7f0000002000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/107, 0x6b}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003200)=""/12, 0xc}, 0x8}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/70, 0x46}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/173, 0xad}], 0x4}, 0x80000001}, {{&(0x7f0000004400)=@alg, 0x80, &(0x7f0000004500)=[{&(0x7f0000004480)=""/99, 0x63}], 0x1, &(0x7f0000004540)=""/83, 0x53}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f00000045c0)=""/20, 0x14}, {&(0x7f0000004600)=""/14, 0xe}], 0x2, &(0x7f0000004680)=""/196, 0xc4}, 0x9}, {{0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000004780)=""/236, 0xec}, {&(0x7f0000004880)=""/45, 0x2d}, {&(0x7f00000048c0)=""/175, 0xaf}, {&(0x7f0000004980)=""/55, 0x37}, {&(0x7f00000049c0)=""/137, 0x89}, {&(0x7f0000004a80)=""/214, 0xd6}], 0x6, &(0x7f0000004c00)=""/228, 0xe4}, 0x7fff}], 0x9, 0x0, &(0x7f0000004f80)={r1, r2+10000000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8202) open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000001f00)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x103084, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xd) [ 483.810862] kobject: 'loop3' (000000008be44d72): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 483.815265] tty_set_ldisc+0x2dc/0x6a0 [ 483.815299] tty_ioctl+0x39d/0x17d0 [ 483.815313] ? tty_vhangup+0x30/0x30 [ 483.815348] ? avc_has_extended_perms+0xab2/0x15a0 [ 483.840907] ? avc_ss_reset+0x190/0x190 [ 483.844872] ? rcu_read_unlock_special+0x1d0/0x1d0 [ 483.849793] ? kasan_check_read+0x11/0x20 [ 483.853966] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 483.859774] ? rcu_softirq_qs+0x20/0x20 [ 483.863782] ? ___might_sleep+0x1ed/0x300 [ 483.867940] ? arch_local_save_flags+0x40/0x40 [ 483.872529] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 483.877460] ? tty_vhangup+0x30/0x30 [ 483.881163] do_vfs_ioctl+0x1de/0x1790 [ 483.885048] ? ioctl_preallocate+0x300/0x300 [ 483.889454] ? selinux_file_mprotect+0x620/0x620 [ 483.894209] ? __sb_end_write+0xd9/0x110 [ 483.898295] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 483.903832] ? fput+0x130/0x1a0 [ 483.907111] ? do_syscall_64+0x9a/0x820 [ 483.911090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 483.916637] ? security_file_ioctl+0x94/0xc0 [ 483.921055] ksys_ioctl+0xa9/0xd0 [ 483.924517] __x64_sys_ioctl+0x73/0xb0 [ 483.928409] do_syscall_64+0x1b9/0x820 [ 483.932288] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 483.937664] ? syscall_return_slowpath+0x5e0/0x5e0 [ 483.942595] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 483.947429] ? trace_hardirqs_on_caller+0x310/0x310 [ 483.952430] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 483.957432] ? prepare_exit_to_usermode+0x291/0x3b0 [ 483.962450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 483.967306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 483.972494] RIP: 0033:0x457759 [ 483.975679] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 483.994570] RSP: 002b:00007fc7e19f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.002293] RAX: ffffffffffffffda RBX: 00007fc7e19f2c90 RCX: 0000000000457759 [ 484.009568] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000005 [ 484.012886] sg_write: data in/out 167162/1 bytes for SCSI command 0xff-- guessing data in; [ 484.012886] program syz-executor2 not setting count and/or reply_len properly [ 484.016837] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 484.016846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc7e19f36d4 [ 484.016855] R13: 00000000004c18ff R14: 00000000004d3b28 R15: 0000000000000006 [ 484.016871] Modules linked in: [ 484.016881] CR2: fffffffffffffff4 [ 484.016897] ---[ end trace 004e021a5676c673 ]--- [ 484.016920] RIP: 0010:slhc_free+0x30/0xb0 [ 484.016946] Code: 53 48 89 fb e8 71 04 ad fc 48 85 db 74 74 e8 67 04 ad fc 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 69 <4c> 8b 23 4d 85 e4 74 0d e8 43 04 ad fc 4c 89 e7 e8 bb e1 ef fc e8 [ 484.042558] kobject: 'hwsim171' (000000008b7d9b9c): kobject_add_internal: parent: 'mac80211_hwsim', set: 'devices' [ 484.047263] RSP: 0018:ffff88817ad6f770 EFLAGS: 00010246 [ 484.047276] RAX: dffffc0000000000 RBX: fffffffffffffff4 RCX: ffffc9000fecd000 [ 484.047286] RDX: 1ffffffffffffffe RSI: ffffffff84d15439 RDI: fffffffffffffff4 [ 484.047295] RBP: ffff88817ad6f780 R08: ffff8881ad9bcbb0 R09: 0000000000000006 [ 484.047304] R10: 0000000000000000 R11: ffff8881ad9bc2c0 R12: 00000000ffffff97 [ 484.047314] R13: ffff88817a430240 R14: ffff8881acb5ea80 R15: ffff8881843f1640 [ 484.047326] FS: 00007fc7e19f3700(0000) GS:ffff8881daf00000(0000) knlGS:0000000000000000 [ 484.047342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.055396] kobject: 'hwsim171' (000000008b7d9b9c): kobject_uevent_env [ 484.057793] CR2: fffffffffffffff4 CR3: 00000001b06f9000 CR4: 00000000001406e0 [ 484.057806] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.057815] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.057824] Kernel panic - not syncing: Fatal exception [ 484.058746] Kernel Offset: disabled [ 484.193422] Rebooting in 86400 seconds..