[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 93.578639] audit: type=1800 audit(1546563573.637:25): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 93.598339] audit: type=1800 audit(1546563573.637:26): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 93.617774] audit: type=1800 audit(1546563573.657:27): pid=11161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.115' (ECDSA) to the list of known hosts. 2019/01/04 00:59:48 fuzzer started 2019/01/04 00:59:52 dialing manager at 10.128.0.26:41807 2019/01/04 00:59:53 syscalls: 1 2019/01/04 00:59:53 code coverage: enabled 2019/01/04 00:59:53 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/01/04 00:59:53 setuid sandbox: enabled 2019/01/04 00:59:53 namespace sandbox: enabled 2019/01/04 00:59:53 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/04 00:59:53 fault injection: enabled 2019/01/04 00:59:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/04 00:59:53 net packet injection: enabled 2019/01/04 00:59:53 net device setup: enabled 01:02:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000740)) syzkaller login: [ 290.327491] IPVS: ftp: loaded support on port[0] = 21 [ 290.480334] chnl_net:caif_netlink_parms(): no params data found [ 290.550569] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.557211] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.565589] device bridge_slave_0 entered promiscuous mode [ 290.575317] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.581900] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.590089] device bridge_slave_1 entered promiscuous mode [ 290.626237] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 290.637582] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 290.667717] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 290.676391] team0: Port device team_slave_0 added [ 290.683465] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 290.692192] team0: Port device team_slave_1 added [ 290.699367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 290.708479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 290.887522] device hsr_slave_0 entered promiscuous mode [ 291.082660] device hsr_slave_1 entered promiscuous mode [ 291.343396] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 291.350951] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 291.381182] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.387760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.394957] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.401494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.492495] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 291.498606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.512963] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 291.525420] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.535248] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.547247] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 291.561939] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 291.570291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.578057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.592260] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 291.598361] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.612778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 291.619982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.628641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.638267] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.644806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.659774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 291.672833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 291.686688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 291.694717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.703539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.712154] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.718643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.727138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.736296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.751813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 291.764065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 291.777456] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 291.789649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 291.799510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.809276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.820998] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 291.828601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 291.837711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.846463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 291.855341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.863982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.872303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.881145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.889684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.900061] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.908720] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.939712] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 291.968825] 8021q: adding VLAN 0 to HW filter on device batadv0 01:02:52 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)=[{0x0}, {0x0}], 0x2, &(0x7f0000001500)=""/67, 0x43}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='pids.current\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x8d41e965388e3f09, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000780)={'nr0\x01\x00', 0x802}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'ifb0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) r4 = perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x3, 0x4, 0x0, 0x8, 0x0, 0x0, 0x80, 0x0, 0x7fffffff, 0x0, 0x9, 0x9, 0x8, 0x0, 0x0, 0x9, 0x5, 0x1f, 0xff, 0x0, 0xeb90, 0x0, 0x4, 0x6, 0x0, 0x20fb, 0xb5a1, 0x0, 0x100000001, 0x0, 0x9, 0x0, 0x100000001, 0x6, 0x8, 0x0, 0x0, 0x7679, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1898, 0x7, 0x3, 0x4, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffff9c, 0x1) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000740)={'nr0\x00', @random="6365bcb193ee"}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) 01:02:52 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:53 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)=[{0x0}, {0x0}], 0x2, &(0x7f0000001500)=""/67, 0x43}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='pids.current\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) openat$cgroup(r1, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x8d41e965388e3f09, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000780)={'nr0\x01\x00', 0x802}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'ifb0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) r4 = perf_event_open(&(0x7f00000004c0)={0x7, 0x70, 0x3, 0x4, 0x0, 0x8, 0x0, 0x0, 0x80, 0x0, 0x7fffffff, 0x0, 0x9, 0x9, 0x8, 0x0, 0x0, 0x9, 0x5, 0x1f, 0xff, 0x0, 0xeb90, 0x0, 0x4, 0x6, 0x0, 0x20fb, 0xb5a1, 0x0, 0x100000001, 0x0, 0x9, 0x0, 0x100000001, 0x6, 0x8, 0x0, 0x0, 0x7679, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x1898, 0x7, 0x3, 0x4, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffff9c, 0x1) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000740)={'nr0\x00', @random="6365bcb193ee"}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x12) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) [ 293.273684] IPVS: ftp: loaded support on port[0] = 21 [ 293.476264] chnl_net:caif_netlink_parms(): no params data found [ 293.551889] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.558410] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.566764] device bridge_slave_0 entered promiscuous mode [ 293.575593] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.582182] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.590309] device bridge_slave_1 entered promiscuous mode [ 293.623239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 293.635885] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 293.664726] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 293.673384] team0: Port device team_slave_0 added [ 293.680687] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 293.689974] team0: Port device team_slave_1 added [ 293.698677] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 293.707232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 293.777317] device hsr_slave_0 entered promiscuous mode [ 293.834254] device hsr_slave_1 entered promiscuous mode [ 293.903337] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 293.911955] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 293.948905] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.955588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.962950] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.969488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.070284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.083992] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 294.099624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.110336] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.119749] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.143665] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 294.149780] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.175409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.184074] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.190561] bridge0: port 1(bridge_slave_0) entered forwarding state 01:02:54 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 294.233428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.242228] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.248784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.258332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.273940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 294.287742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 294.303022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 294.324090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.333869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.345586] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 294.353652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.361963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.370869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.379828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.388643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.397616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.406003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.435139] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 294.453812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.477435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 01:02:55 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:58 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:58 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:58 executing program 2: arch_prctl$ARCH_GET_CPUID(0x1011) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x1000, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x40400) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0x4, 0x1, r2, 0x0, r3, 0x0, 0x400, 0x8000}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000280)=0x2, 0x4) perf_event_open(&(0x7f0000000300)={0x7, 0x70, 0x8, 0x3, 0x0, 0x7f, 0x0, 0x5, 0x80000, 0x3, 0xa7d1, 0x800, 0x99, 0x400, 0xfffffffffffffffc, 0x101, 0xfffffffffffff5dc, 0x0, 0x4, 0xffff, 0x200, 0x3, 0x9, 0x5, 0x7, 0x4, 0x1, 0x100, 0x4, 0x3d, 0x7, 0x9, 0x6, 0x2, 0x0, 0x1ff, 0x8, 0xffffffff, 0x0, 0xfffffffffffffff8, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x40, 0x9, 0x0, 0xb, 0xb0, 0x7, 0x100}, 0x0, 0xe, r0, 0x9) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000380)={0x5, 0x3, 0x5}) fanotify_init(0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000440)) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000480)={0x1f, 0x10000, 0x10000}) fsync(r1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000600)={r0, r1}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000640)={0x7fff, 0xff}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000680)={0x800100b, 0x1, 0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e20, 0xaf, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0x1000, 0x400, 0xffffffffffffffaa, 0x0, 0x8}, &(0x7f0000000780)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000007c0)={r5, 0x1f}, &(0x7f0000000800)=0x8) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000940), &(0x7f0000000980)=0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0x100, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e07}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8880}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcb000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) connect$caif(r0, &(0x7f0000000bc0)=@util={0x25, "d71cc15a41e79e6eff333fd9515e595d"}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000c00)={0x6, 0x3, 0x19f, 'queue0\x00', 0x8}) r7 = getegid() write$P9_RSTATu(r1, &(0x7f0000000cc0)={0x71, 0x7d, 0x2, {{0x0, 0x4c, 0x8, 0x200, {0x23, 0x1, 0x3}, 0x44800000, 0x49, 0x0, 0x7fffffff, 0x0, '', 0x2, '-$', 0x10, '/dev/sequencer2\x00', 0x7, 'queue0\x00'}, 0x10, '/dev/sequencer2\x00', r3, r7, r3}}, 0x71) 01:02:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:02:59 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 299.467108] IPVS: ftp: loaded support on port[0] = 21 01:02:59 executing program 1: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 299.681159] chnl_net:caif_netlink_parms(): no params data found 01:02:59 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) [ 299.792468] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.799005] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.807373] device bridge_slave_0 entered promiscuous mode 01:02:59 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 299.852969] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.859573] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.867935] device bridge_slave_1 entered promiscuous mode [ 299.906303] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 299.917634] bond0: Enslaving bond_slave_1 as an active interface with an up link 01:03:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 299.969127] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 299.978022] team0: Port device team_slave_0 added [ 299.986525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 299.995361] team0: Port device team_slave_1 added 01:03:00 executing program 0: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 300.028375] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 300.055926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 01:03:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 300.156478] device hsr_slave_0 entered promiscuous mode [ 300.212987] device hsr_slave_1 entered promiscuous mode 01:03:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) [ 300.254273] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 300.261899] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 300.345824] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.352424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.359540] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.366202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.477277] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 300.483698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.496806] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 300.509348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.519977] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.528351] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.539118] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 300.558428] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 300.565691] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.580870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.589661] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.596227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.634464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.642733] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.649220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.658855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.689800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.699704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.711368] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 300.722755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.731352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.740130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.750132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.759611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.788664] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 300.816229] 8021q: adding VLAN 0 to HW filter on device batadv0 01:03:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 01:03:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 01:03:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:03:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:03:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:03:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:02 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:03:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:03:02 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:02 executing program 1 (fault-call:1 fault-nth:0): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 302.725067] FAULT_INJECTION: forcing a failure. [ 302.725067] name failslab, interval 1, probability 0, space 0, times 1 [ 302.738569] CPU: 0 PID: 11824 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #1 [ 302.745801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.755196] Call Trace: [ 302.757858] dump_stack+0x173/0x1d0 [ 302.761575] should_fail+0xa19/0xb20 [ 302.765853] __should_failslab+0x278/0x2a0 [ 302.770151] should_failslab+0x29/0x70 01:03:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 302.774126] kmem_cache_alloc_node+0x123/0xc60 [ 302.778778] ? __alloc_skb+0x218/0xa20 [ 302.782738] ? aa_label_sk_perm+0x6d6/0x940 [ 302.787118] __alloc_skb+0x218/0xa20 [ 302.790893] ? pfkey_sendmsg+0x1/0x1a60 [ 302.794923] pfkey_sendmsg+0x1e9/0x1a60 [ 302.798970] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 302.804385] ? aa_sk_perm+0x605/0x950 [ 302.808275] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 302.813688] ? security_socket_sendmsg+0x1bd/0x200 [ 302.818683] ___sys_sendmsg+0xdb9/0x11b0 [ 302.822799] ? pfkey_release+0x510/0x510 [ 302.826932] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 302.832360] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 302.837776] ? __fget_light+0x6e1/0x750 [ 302.841832] __se_sys_sendmsg+0x305/0x460 [ 302.846061] __x64_sys_sendmsg+0x4a/0x70 [ 302.850180] do_syscall_64+0xbc/0xf0 [ 302.853968] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 302.859201] RIP: 0033:0x457ec9 [ 302.862449] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.881522] RSP: 002b:00007f90946b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.889290] RAX: ffffffffffffffda RBX: 00007f90946b1c90 RCX: 0000000000457ec9 [ 302.896605] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 302.903921] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 302.911235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90946b26d4 [ 302.918562] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:03:03 executing program 1 (fault-call:1 fault-nth:1): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 303.138093] FAULT_INJECTION: forcing a failure. [ 303.138093] name failslab, interval 1, probability 0, space 0, times 0 [ 303.149549] CPU: 1 PID: 11837 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #1 [ 303.156780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.166174] Call Trace: [ 303.168837] dump_stack+0x173/0x1d0 [ 303.172539] should_fail+0xa19/0xb20 [ 303.176322] __should_failslab+0x278/0x2a0 [ 303.180618] should_failslab+0x29/0x70 [ 303.184573] __kmalloc_node_track_caller+0x208/0x1030 [ 303.189828] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 303.195245] ? kmem_cache_alloc_node+0x1ce/0xc60 [ 303.200064] ? pfkey_sendmsg+0x1e9/0x1a60 [ 303.204272] ? pfkey_sendmsg+0x1e9/0x1a60 [ 303.208483] __alloc_skb+0x309/0xa20 [ 303.212257] ? pfkey_sendmsg+0x1e9/0x1a60 [ 303.216472] pfkey_sendmsg+0x1e9/0x1a60 [ 303.220542] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 303.225970] ? aa_sk_perm+0x605/0x950 [ 303.229864] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 303.235283] ? security_socket_sendmsg+0x1bd/0x200 [ 303.240280] ___sys_sendmsg+0xdb9/0x11b0 [ 303.244404] ? pfkey_release+0x510/0x510 [ 303.248546] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 303.253982] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 303.259408] ? __fget_light+0x6e1/0x750 [ 303.263462] __se_sys_sendmsg+0x305/0x460 [ 303.267697] __x64_sys_sendmsg+0x4a/0x70 [ 303.271815] do_syscall_64+0xbc/0xf0 [ 303.275603] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 303.280834] RIP: 0033:0x457ec9 [ 303.284080] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.303036] RSP: 002b:00007f90946b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.310797] RAX: ffffffffffffffda RBX: 00007f90946b1c90 RCX: 0000000000457ec9 [ 303.318108] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 303.325418] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 01:03:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 303.332730] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90946b26d4 [ 303.340046] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:03:03 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 303.555010] FAULT_INJECTION: forcing a failure. [ 303.555010] name failslab, interval 1, probability 0, space 0, times 0 [ 303.566433] CPU: 0 PID: 11849 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #1 [ 303.573679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.583067] Call Trace: [ 303.585720] dump_stack+0x173/0x1d0 [ 303.589402] should_fail+0xa19/0xb20 [ 303.593182] __should_failslab+0x278/0x2a0 [ 303.597477] should_failslab+0x29/0x70 01:03:03 executing program 1 (fault-call:1 fault-nth:2): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 303.601438] kmem_cache_alloc_node+0x123/0xc60 [ 303.606097] ? __alloc_skb+0x218/0xa20 [ 303.610053] ? aa_label_sk_perm+0x6d6/0x940 [ 303.614438] __alloc_skb+0x218/0xa20 [ 303.618235] ? pfkey_sendmsg+0x1/0x1a60 [ 303.622266] pfkey_sendmsg+0x1e9/0x1a60 [ 303.626312] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 303.631737] ? aa_sk_perm+0x605/0x950 [ 303.635627] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 303.641044] ? security_socket_sendmsg+0x1bd/0x200 [ 303.646048] ___sys_sendmsg+0xdb9/0x11b0 [ 303.650170] ? pfkey_release+0x510/0x510 [ 303.654301] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 303.659738] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 303.665153] ? __fget_light+0x6e1/0x750 [ 303.669205] __se_sys_sendmsg+0x305/0x460 [ 303.673430] __x64_sys_sendmsg+0x4a/0x70 [ 303.677563] do_syscall_64+0xbc/0xf0 [ 303.681351] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 303.686590] RIP: 0033:0x457ec9 [ 303.689838] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.708789] RSP: 002b:00007f176bc58c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.716580] RAX: ffffffffffffffda RBX: 00007f176bc58c90 RCX: 0000000000457ec9 [ 303.717207] FAULT_INJECTION: forcing a failure. [ 303.717207] name failslab, interval 1, probability 0, space 0, times 0 [ 303.723903] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 303.723927] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 303.723951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f176bc596d4 [ 303.723974] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 [ 303.765107] CPU: 1 PID: 11853 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #1 [ 303.772335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.781727] Call Trace: [ 303.784383] dump_stack+0x173/0x1d0 [ 303.788069] ? __should_failslab+0x278/0x2a0 [ 303.792542] should_fail+0xa19/0xb20 [ 303.796325] __should_failslab+0x278/0x2a0 [ 303.800623] should_failslab+0x29/0x70 [ 303.804567] kmem_cache_alloc+0xf9/0xb90 [ 303.808690] ? skb_clone+0x300/0x580 [ 303.812486] skb_clone+0x300/0x580 [ 303.816086] pfkey_sendmsg+0x76d/0x1a60 [ 303.820169] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 303.825632] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 303.831058] ? security_socket_sendmsg+0x1bd/0x200 [ 303.836063] ___sys_sendmsg+0xdb9/0x11b0 [ 303.840188] ? pfkey_release+0x510/0x510 [ 303.844322] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 303.849758] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 303.855169] ? __fget_light+0x6e1/0x750 [ 303.859226] __se_sys_sendmsg+0x305/0x460 [ 303.863462] __x64_sys_sendmsg+0x4a/0x70 [ 303.867592] do_syscall_64+0xbc/0xf0 [ 303.871376] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 303.876607] RIP: 0033:0x457ec9 [ 303.879850] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.899281] RSP: 002b:00007f90946b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.907041] RAX: ffffffffffffffda RBX: 00007f90946b1c90 RCX: 0000000000457ec9 [ 303.914352] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 303.921659] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 303.928970] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90946b26d4 [ 303.936286] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:03:04 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 304.144987] FAULT_INJECTION: forcing a failure. [ 304.144987] name failslab, interval 1, probability 0, space 0, times 0 [ 304.156417] CPU: 1 PID: 11863 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #1 [ 304.163662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.173049] Call Trace: [ 304.175705] dump_stack+0x173/0x1d0 [ 304.179395] should_fail+0xa19/0xb20 [ 304.183175] __should_failslab+0x278/0x2a0 [ 304.187484] should_failslab+0x29/0x70 [ 304.191431] __kmalloc_node_track_caller+0x208/0x1030 [ 304.196694] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 304.202112] ? kmem_cache_alloc_node+0x1ce/0xc60 [ 304.206922] ? pfkey_sendmsg+0x1e9/0x1a60 [ 304.211149] ? pfkey_sendmsg+0x1e9/0x1a60 [ 304.215359] __alloc_skb+0x309/0xa20 [ 304.219127] ? pfkey_sendmsg+0x1e9/0x1a60 [ 304.223342] pfkey_sendmsg+0x1e9/0x1a60 [ 304.227383] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 304.232806] ? aa_sk_perm+0x605/0x950 [ 304.236696] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 304.242114] ? security_socket_sendmsg+0x1bd/0x200 [ 304.247109] ___sys_sendmsg+0xdb9/0x11b0 [ 304.251236] ? pfkey_release+0x510/0x510 [ 304.255365] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 304.260795] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 304.266212] ? __fget_light+0x6e1/0x750 [ 304.270263] __se_sys_sendmsg+0x305/0x460 [ 304.274504] __x64_sys_sendmsg+0x4a/0x70 [ 304.278632] do_syscall_64+0xbc/0xf0 [ 304.282413] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 304.287656] RIP: 0033:0x457ec9 [ 304.290899] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.309849] RSP: 002b:00007f176bc58c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.317613] RAX: ffffffffffffffda RBX: 00007f176bc58c90 RCX: 0000000000457ec9 [ 304.324922] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 304.332234] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 01:03:04 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 304.339544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f176bc596d4 [ 304.346852] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:03:04 executing program 1 (fault-call:1 fault-nth:3): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 304.527346] FAULT_INJECTION: forcing a failure. [ 304.527346] name failslab, interval 1, probability 0, space 0, times 0 [ 304.538839] CPU: 1 PID: 11868 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #1 [ 304.546066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.555453] Call Trace: [ 304.558112] dump_stack+0x173/0x1d0 [ 304.561799] should_fail+0xa19/0xb20 [ 304.565585] __should_failslab+0x278/0x2a0 [ 304.569878] should_failslab+0x29/0x70 [ 304.573819] kmem_cache_alloc_trace+0x125/0xb90 [ 304.578556] ? __request_module+0x7fa/0x1340 [ 304.583029] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 304.588450] __request_module+0x7fa/0x1340 [ 304.592757] ? crypto_alg_mod_lookup+0x24f/0x1250 [ 304.597662] ? up_read+0x28/0x80 [ 304.601076] ? crypto_alg_lookup+0x41b/0x460 [ 304.605546] crypto_alg_mod_lookup+0x24f/0x1250 [ 304.610280] crypto_has_alg+0x8a/0x220 [ 304.614231] xfrm_probe_algs+0x43f/0x650 [ 304.618352] pfkey_register+0x1eb/0xc20 [ 304.622385] ? pfkey_acquire+0x380/0x380 [ 304.626500] pfkey_sendmsg+0x1663/0x1a60 [ 304.630626] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 304.636086] ___sys_sendmsg+0xdb9/0x11b0 [ 304.640199] ? pfkey_release+0x510/0x510 [ 304.644327] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 304.649753] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 304.655160] ? __fget_light+0x6e1/0x750 [ 304.659207] __se_sys_sendmsg+0x305/0x460 [ 304.663429] __x64_sys_sendmsg+0x4a/0x70 [ 304.667555] do_syscall_64+0xbc/0xf0 [ 304.671335] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 304.676566] RIP: 0033:0x457ec9 [ 304.679810] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.698755] RSP: 002b:00007f90946b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.706514] RAX: ffffffffffffffda RBX: 00007f90946b1c90 RCX: 0000000000457ec9 [ 304.713817] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 304.721123] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 01:03:04 executing program 2: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:04 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 304.728435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90946b26d4 [ 304.735752] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 [ 304.859271] FAULT_INJECTION: forcing a failure. [ 304.859271] name failslab, interval 1, probability 0, space 0, times 0 [ 304.870803] CPU: 1 PID: 11877 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #1 [ 304.878036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.887432] Call Trace: [ 304.890107] dump_stack+0x173/0x1d0 [ 304.893794] ? __should_failslab+0x278/0x2a0 [ 304.898749] should_fail+0xa19/0xb20 [ 304.902533] __should_failslab+0x278/0x2a0 [ 304.906826] should_failslab+0x29/0x70 [ 304.910769] kmem_cache_alloc+0xf9/0xb90 [ 304.914893] ? skb_clone+0x300/0x580 [ 304.918675] skb_clone+0x300/0x580 [ 304.922277] pfkey_sendmsg+0x76d/0x1a60 [ 304.926323] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 304.931782] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 304.937202] ? security_socket_sendmsg+0x1bd/0x200 [ 304.942197] ___sys_sendmsg+0xdb9/0x11b0 [ 304.946321] ? pfkey_release+0x510/0x510 [ 304.950461] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 304.955895] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 304.961309] ? __fget_light+0x6e1/0x750 [ 304.965362] __se_sys_sendmsg+0x305/0x460 [ 304.969592] __x64_sys_sendmsg+0x4a/0x70 [ 304.973705] do_syscall_64+0xbc/0xf0 [ 304.977498] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 304.982728] RIP: 0033:0x457ec9 [ 304.985980] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.004925] RSP: 002b:00007f176bc58c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.012692] RAX: ffffffffffffffda RBX: 00007f176bc58c90 RCX: 0000000000457ec9 [ 305.019999] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 305.027311] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 305.034618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f176bc596d4 [ 305.041923] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:03:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 01:03:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 01:03:05 executing program 1 (fault-call:1 fault-nth:4): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:05 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 305.493765] FAULT_INJECTION: forcing a failure. [ 305.493765] name failslab, interval 1, probability 0, space 0, times 0 [ 305.500797] FAULT_INJECTION: forcing a failure. [ 305.500797] name failslab, interval 1, probability 0, space 0, times 0 [ 305.505187] CPU: 1 PID: 11898 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #1 [ 305.505209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.505224] Call Trace: [ 305.505279] dump_stack+0x173/0x1d0 [ 305.505345] should_fail+0xa19/0xb20 [ 305.543031] __should_failslab+0x278/0x2a0 [ 305.547322] should_failslab+0x29/0x70 [ 305.551265] kmem_cache_alloc_trace+0x125/0xb90 [ 305.556004] ? __request_module+0x7fa/0x1340 [ 305.560506] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 305.565925] __request_module+0x7fa/0x1340 [ 305.570222] ? crypto_alg_mod_lookup+0x24f/0x1250 [ 305.575116] ? up_read+0x28/0x80 [ 305.578523] ? crypto_alg_lookup+0x41b/0x460 [ 305.582984] crypto_alg_mod_lookup+0x24f/0x1250 [ 305.587703] crypto_has_alg+0x8a/0x220 [ 305.591644] xfrm_probe_algs+0x43f/0x650 [ 305.595750] pfkey_register+0x1eb/0xc20 [ 305.599772] ? pfkey_acquire+0x380/0x380 [ 305.603868] pfkey_sendmsg+0x1663/0x1a60 [ 305.607986] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 305.613442] ___sys_sendmsg+0xdb9/0x11b0 [ 305.617548] ? pfkey_release+0x510/0x510 [ 305.621663] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 305.627078] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 305.632480] ? __fget_light+0x6e1/0x750 [ 305.636521] __se_sys_sendmsg+0x305/0x460 [ 305.640728] __x64_sys_sendmsg+0x4a/0x70 [ 305.644829] do_syscall_64+0xbc/0xf0 [ 305.648595] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.653818] RIP: 0033:0x457ec9 [ 305.657050] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.675989] RSP: 002b:00007f176bc58c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.683744] RAX: ffffffffffffffda RBX: 00007f176bc58c90 RCX: 0000000000457ec9 [ 305.691042] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 305.698340] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 305.705641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f176bc596d4 [ 305.712943] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 [ 305.720272] CPU: 0 PID: 11896 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #1 [ 305.727499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.736885] Call Trace: [ 305.739536] dump_stack+0x173/0x1d0 [ 305.743220] ? __should_failslab+0x278/0x2a0 [ 305.747680] should_fail+0xa19/0xb20 [ 305.751498] __should_failslab+0x278/0x2a0 [ 305.755795] should_failslab+0x29/0x70 [ 305.759743] __kmalloc_track_caller+0x1d3/0xce0 [ 305.764964] ? __request_module+0x87b/0x1340 [ 305.769465] ? strlen+0x51/0xa0 [ 305.772804] kstrdup+0xc4/0x160 [ 305.776143] __request_module+0x87b/0x1340 [ 305.780469] ? up_read+0x28/0x80 [ 305.783892] ? crypto_alg_lookup+0x41b/0x460 [ 305.788358] crypto_alg_mod_lookup+0x24f/0x1250 [ 305.793090] crypto_has_alg+0x8a/0x220 [ 305.797044] xfrm_probe_algs+0x43f/0x650 [ 305.801165] pfkey_register+0x1eb/0xc20 [ 305.805201] ? pfkey_acquire+0x380/0x380 [ 305.809312] pfkey_sendmsg+0x1663/0x1a60 [ 305.813463] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 305.818926] ___sys_sendmsg+0xdb9/0x11b0 [ 305.823040] ? pfkey_release+0x510/0x510 [ 305.827158] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 305.832598] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 305.838013] ? __fget_light+0x6e1/0x750 [ 305.842067] __se_sys_sendmsg+0x305/0x460 [ 305.846287] __x64_sys_sendmsg+0x4a/0x70 [ 305.850402] do_syscall_64+0xbc/0xf0 [ 305.854195] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 305.859445] RIP: 0033:0x457ec9 [ 305.862692] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.881701] RSP: 002b:00007f90946b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 01:03:05 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 305.889478] RAX: ffffffffffffffda RBX: 00007f90946b1c90 RCX: 0000000000457ec9 [ 305.896992] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 305.904301] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 305.911610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90946b26d4 [ 305.918916] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:03:06 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x400) getgroups(0x4, &(0x7f0000000040)=[0xee00, 0xee01, 0xee00, 0x0]) setgid(r2) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x9, 0x800, 0x7, 0x80, 0x11, 0x3}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x4, [{r0, 0x0, 0x1000, 0xfffff000}, {r0, 0x0, 0xfffffffff0010000, 0x8000}, {r0, 0x0, 0x8000, 0xfffff000}, {r0, 0x0, 0x2000, 0x1001000}]}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @local}, 0x140, 0x0, 0x0, 0x0, 0x81, 0x0, 0x800, 0x3ff, 0x2}) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000001c0)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x5, 0x8, 0x8}) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x21) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}}, 0x4000000) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000380)=0x5) rt_sigtimedwait(&(0x7f00000003c0)={0x8}, &(0x7f0000000400), &(0x7f0000000480), 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000004c0)={0x0, 0xe94b, 0x20}, &(0x7f0000000500)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000540)={r4, 0x3, 0x30}, 0xc) r5 = syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x9, 0x80) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4068aea3, &(0x7f00000005c0)={0x7b, 0x0, [0x1, 0x1fffc000000, 0x2, 0xffffffffffffffe1]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in=@multicast1, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000800)=0xe8) connect$can_bcm(r5, &(0x7f0000000840)={0x1d, r6}, 0x10) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000880)) write$FUSE_ATTR(r5, &(0x7f00000008c0)={0x78, 0x0, 0x8, {0xffff, 0x3, 0x0, {0x3, 0x7, 0x29, 0x7, 0x4, 0x80000000, 0x80000000, 0x3, 0xfb, 0x6, 0x400, r7, r1, 0x6, 0x7f}}}, 0x78) ioctl$KDADDIO(r5, 0x4b34, 0xffff) r8 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$update(0x2, r8, &(0x7f00000009c0)="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", 0x1000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000019c0)={&(0x7f0000ffc000/0x2000)=nil, 0x4cb, 0x7, 0xa, &(0x7f0000ff9000/0x4000)=nil, 0x7fffffff}) syz_genetlink_get_family_id$tipc(&(0x7f0000001a00)='TIPC\x00') recvmsg$kcm(r5, &(0x7f0000001bc0)={&(0x7f0000001a40)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001ac0)=""/104, 0x68}], 0x1, &(0x7f0000001b80)=""/25, 0x19}, 0x10003) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000001c00)) 01:03:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:06 executing program 1 (fault-call:1 fault-nth:5): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 306.353583] FAULT_INJECTION: forcing a failure. [ 306.353583] name failslab, interval 1, probability 0, space 0, times 0 [ 306.365009] CPU: 1 PID: 11917 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #1 [ 306.372232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.381615] Call Trace: [ 306.384264] dump_stack+0x173/0x1d0 [ 306.387949] ? __should_failslab+0x278/0x2a0 [ 306.392423] should_fail+0xa19/0xb20 [ 306.396202] __should_failslab+0x278/0x2a0 [ 306.400489] should_failslab+0x29/0x70 [ 306.404441] kmem_cache_alloc_trace+0x125/0xb90 [ 306.409169] ? memcg_kmem_put_cache+0x64/0x2d0 [ 306.413812] ? call_usermodehelper_setup+0x16d/0x550 [ 306.418983] ? kmsan_memcpy_memmove_metadata+0x58f/0xfa0 [ 306.424489] call_usermodehelper_setup+0x16d/0x550 [ 306.429480] ? __request_module+0x1340/0x1340 [ 306.434038] __request_module+0x9e5/0x1340 [ 306.438349] ? up_read+0x28/0x80 [ 306.441784] ? crypto_alg_lookup+0x41b/0x460 [ 306.446245] crypto_alg_mod_lookup+0x24f/0x1250 [ 306.450981] crypto_has_alg+0x8a/0x220 [ 306.454939] xfrm_probe_algs+0x43f/0x650 [ 306.459057] pfkey_register+0x1eb/0xc20 [ 306.463099] ? pfkey_acquire+0x380/0x380 [ 306.467213] pfkey_sendmsg+0x1663/0x1a60 [ 306.471341] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 306.476794] ___sys_sendmsg+0xdb9/0x11b0 [ 306.480907] ? pfkey_release+0x510/0x510 [ 306.485042] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 306.490479] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 306.495893] ? __fget_light+0x6e1/0x750 [ 306.499957] __se_sys_sendmsg+0x305/0x460 [ 306.504178] __x64_sys_sendmsg+0x4a/0x70 [ 306.508289] do_syscall_64+0xbc/0xf0 [ 306.512072] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 306.517304] RIP: 0033:0x457ec9 [ 306.520554] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 306.539500] RSP: 002b:00007f90946b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.547258] RAX: ffffffffffffffda RBX: 00007f90946b1c90 RCX: 0000000000457ec9 01:03:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:03:06 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x4, 0x5, 0x2a, 0x0, 0x1, 0x0, [@sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x0, 0x0, {0x6, 0x3f, 0xce1, 0x5, 0x0, 0x1, 0x0, @in=@empty, @in=@broadcast}}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e20}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_ident={0x2, 0xb, 0x1, 0x0, 0x101}, @sadb_key={0x3, 0x9, 0x70, 0x0, "ccc9be6b014f2cd838f35c8ae4bb"}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_key={0x9, 0x8, 0x1e0, 0x0, "5f5ac70b507c5bbf2d99625ca6ed0602a2cc9352ec1f91f636a114eabebeb909faf71a76f08af1a5f08751c8fb23ba4ed6d9cd13726885ddcd997e24"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0xffffffff, @loopback, 0x8}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x7, @loopback, 0xc6}}]}, 0x150}}, 0xfffffffffffffffe) [ 306.554573] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 306.561889] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 306.569206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90946b26d4 [ 306.576525] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:03:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) [ 307.014045] IPVS: ftp: loaded support on port[0] = 21 01:03:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:03:07 executing program 1 (fault-call:1 fault-nth:6): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:07 executing program 0: capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000080)) creat(&(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'system.', '\x9dnodev&\x00'}, &(0x7f0000000240)=""/4096, 0x1000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="0207020000000000000000000000110008b68236496baef6d3d8e5e19e7d72f63dcb8717d60fcc32939e06b007b8b6f968d7cdf91f22bbf0d1ab90e50e4bed153c9fd0d0bbd1ad1b8cf013df918ed62b9accdb7469016956d12923b37d49d2562ef9dcd08940c4d2572d7a171f691af5a786fa5ae2a1471bcea95749b2073085ceb7220ab0026af77000c711bdfe7179a54f97bf363f71d96dfa928962442252790d5acc007d407d1852fb0e92be6967bfc6312b982a0f3141a72b1fa988efd8dd"], 0x10}}, 0x0) [ 307.392651] FAULT_INJECTION: forcing a failure. [ 307.392651] name failslab, interval 1, probability 0, space 0, times 0 [ 307.404072] CPU: 1 PID: 11957 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #1 [ 307.411293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.420679] Call Trace: [ 307.423331] dump_stack+0x173/0x1d0 [ 307.427029] should_fail+0xa19/0xb20 [ 307.430805] __should_failslab+0x278/0x2a0 [ 307.431852] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) [ 307.435096] should_failslab+0x29/0x70 [ 307.435140] kmem_cache_alloc_trace+0x125/0xb90 [ 307.435202] ? __request_module+0x7fa/0x1340 [ 307.453309] chnl_net:caif_netlink_parms(): no params data found [ 307.457200] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 307.468631] __request_module+0x7fa/0x1340 [ 307.472936] ? crypto_alg_mod_lookup+0x31d/0x1250 [ 307.477838] ? up_read+0x28/0x80 [ 307.481258] ? crypto_alg_lookup+0x41b/0x460 [ 307.485720] crypto_alg_mod_lookup+0x31d/0x1250 [ 307.490448] crypto_has_alg+0x8a/0x220 [ 307.494399] xfrm_probe_algs+0x43f/0x650 [ 307.498515] pfkey_register+0x1eb/0xc20 [ 307.502546] ? pfkey_acquire+0x380/0x380 [ 307.506646] pfkey_sendmsg+0x1663/0x1a60 [ 307.510769] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 307.516223] ___sys_sendmsg+0xdb9/0x11b0 [ 307.520332] ? pfkey_release+0x510/0x510 [ 307.524464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 307.528148] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.529890] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 307.529932] ? __fget_light+0x6e1/0x750 [ 307.536429] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.541648] __se_sys_sendmsg+0x305/0x460 [ 307.541704] __x64_sys_sendmsg+0x4a/0x70 [ 307.547353] device bridge_slave_0 entered promiscuous mode [ 307.551984] do_syscall_64+0xbc/0xf0 [ 307.552044] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 307.559161] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.560232] RIP: 0033:0x457ec9 [ 307.560269] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.560299] RSP: 002b:00007f90946b1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.566087] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.569654] RAX: ffffffffffffffda RBX: 00007f90946b1c90 RCX: 0000000000457ec9 [ 307.576729] device bridge_slave_1 entered promiscuous mode [ 307.581165] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 307.609231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 307.611001] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 307.621107] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 307.624599] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90946b26d4 [ 307.624621] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:03:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:07 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 307.819012] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 307.827717] team0: Port device team_slave_0 added [ 307.886625] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 307.895552] team0: Port device team_slave_1 added [ 307.912224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 307.928653] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 308.007128] device hsr_slave_0 entered promiscuous mode [ 308.042450] device hsr_slave_1 entered promiscuous mode [ 308.075288] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 308.084887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 308.123218] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.129768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.136956] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.143550] bridge0: port 1(bridge_slave_0) entered forwarding state 01:03:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 308.403389] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.412682] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.454701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.497887] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 308.512029] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 308.518307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.526063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.539584] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 308.545862] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.567404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 308.574670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.584993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.593313] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.599827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.624130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 308.636956] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 308.649475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 308.658145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.666737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.675058] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.681558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.690435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.699608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.718272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 308.730508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 308.745570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 308.759783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 308.768146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.777723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.786413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.795288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.803951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.812276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.820536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.828922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.840496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.850825] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 308.857017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.892589] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 308.924262] 8021q: adding VLAN 0 to HW filter on device batadv0 01:03:09 executing program 3: unshare(0x400) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) 01:03:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="be12e02fe3d0b4861600000000000000"], 0x10}}, 0x0) ioctl(r0, 0x3f, &(0x7f0000000040)="46fb996e9bc99e45f27114e8a66acfbf36a56b4cbda8f426943c4bcadee87e7758474cce465d8b0f9404e3baa5e5576e833659ab58ef992b025e9274d6810ba610065af77871c058c04ed20a162a") syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) 01:03:09 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x12, 0xff, 0x0, 0xe, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d5, 0x9, 0x4, 0xb5, 0x2, 0x40000001}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e22}, @sadb_key={0x7, 0x8, 0x160, 0x0, "5079f0ef0571e878cbd260d91bcf7fe919696b50541e3e733cbcf55afe1814c7fe48f4efd81222bbd1189d1c"}]}, 0x70}}, 0x4000000) write$9p(r0, &(0x7f00000001c0)="f52b80c2", 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:09 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 309.312434] FAULT_INJECTION: forcing a failure. [ 309.312434] name failslab, interval 1, probability 0, space 0, times 0 [ 309.323978] CPU: 1 PID: 12006 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #1 [ 309.331214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.340608] Call Trace: [ 309.343271] dump_stack+0x173/0x1d0 [ 309.346988] should_fail+0xa19/0xb20 [ 309.350777] __should_failslab+0x278/0x2a0 [ 309.355098] should_failslab+0x29/0x70 [ 309.359070] kmem_cache_alloc_node+0x123/0xc60 [ 309.363725] ? __alloc_skb+0x218/0xa20 [ 309.367693] ? aa_label_sk_perm+0x6d6/0x940 [ 309.372083] __alloc_skb+0x218/0xa20 [ 309.375876] ? pfkey_sendmsg+0x1/0x1a60 [ 309.379918] pfkey_sendmsg+0x1e9/0x1a60 [ 309.383977] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 309.389404] ? aa_sk_perm+0x605/0x950 [ 309.393303] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 309.398755] ? security_socket_sendmsg+0x1bd/0x200 [ 309.403765] ___sys_sendmsg+0xdb9/0x11b0 [ 309.407892] ? pfkey_release+0x510/0x510 [ 309.412035] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 309.417476] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 309.422900] ? __fget_light+0x6e1/0x750 [ 309.426959] __se_sys_sendmsg+0x305/0x460 [ 309.431207] __x64_sys_sendmsg+0x4a/0x70 [ 309.435355] do_syscall_64+0xbc/0xf0 [ 309.439144] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 309.444396] RIP: 0033:0x457ec9 [ 309.447646] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.466600] RSP: 002b:00007f3742197c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.474385] RAX: ffffffffffffffda RBX: 00007f3742197c90 RCX: 0000000000457ec9 [ 309.481704] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 309.489024] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 309.496356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f37421986d4 [ 309.503680] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:03:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000024c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, 0x1d, 0xfffffffffffffffb, 0x0, 0x0, {0x7592da20}, [@nested={0x4, 0x3e}]}, 0x18}}, 0x0) 01:03:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000000000000000"], 0x10}}, 0x0) [ 309.655614] netlink: 'syz-executor3': attribute type 62 has an invalid length. 01:03:09 executing program 2 (fault-call:1 fault-nth:1): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="02e68212e09f85f687babe000000af5b0f0000000000000008000000"], 0x1c}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x7ff, &(0x7f00000000c0)=0x4) [ 309.753948] netlink: 'syz-executor3': attribute type 62 has an invalid length. 01:03:09 executing program 3: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x81, 0x2200) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x6, 0x377, 0xffffffff, 0x8000, 0x4, 0x4, 0x7, 0x7, 0x3, 0x1f}) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 01:03:10 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{}, {r1, r2/1000+30000}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x7, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x12, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x7d, 0x3, 0x4, "d1e2bda6c56e2d00b0d7d3b83d7f649d", "56e851d17094066557e02f2f97dac04d8ef23d89e05e213856090165c3878ea4ed9ff2fb8867b497e615a3dd57c5b7025c820bec6ebfefd6028360fb1a80eb913a52ce15fbf11a055f4f1669ab36c944fbdc30b86d851ff669318aab574690b1dfed5743f325a115"}, 0x7d, 0x3) [ 310.214019] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 310.214019] program syz-executor3 not setting count and/or reply_len properly 01:03:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc020709020000000300000005000000fb00606b014a96a13ed45a6092912c43e42484d5899b657052e014f33e3102e21b16973e04000000000000009a8e89c82a0858b80b93d7456a0807031eff80408b717dbb8becdc596a7874f7568f972f24a4b7042e00000000000000000000"], 0x10}}, 0x0) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140), 0x1, 0x1) [ 310.397078] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 01:03:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000080)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02072309020000000000000000000000"], 0x10}}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e21, 0x2599, @mcast1, 0x8}, r2}}, 0x38) 01:03:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x7, 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0x3}, 0xfffffffffffffed7}}, 0x0) [ 310.897878] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 310.897878] program syz-executor3 not setting count and/or reply_len properly 01:03:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x12}}, 0x3) r1 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x31, 0x80) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=""/126, 0x7e}, 0x20) unlinkat(r1, &(0x7f00000003c0)='./file0\x00', 0x200) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x7, 0x100000001, 0x9, 0x13, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x3, 0x6, 0x10000, 0x100, 0x1}, @sadb_address={0x5, 0x7, 0x3e, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, [], 0x1e}, 0x25}}, @sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@remote, 0x10, 0x10, 0x14}, @sadb_address={0x3, 0x7, 0xff, 0x20, 0x0, @in={0x2, 0x4e23, @remote}}]}, 0x98}}, 0x80) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)={0x1, 0x6d, "d1a08664ca0e23bcd80b28080a6b984023fda5448fe06be6e39d554b1fcecf6b59b50dfe8a4cccf4fb5bbcd9bfd56c7272096bf82f5f1b88221b6141f35149f591ed35bc92706ab8f61e4e218ae9851ed6c95c7b82d50ff6ca725296144c66f7a19e7f272d702d37c190f25263"}) 01:03:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x6) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x9, 0x219, 0x0, 0x70bd2b, 0x0, [@sadb_sa={0x2, 0x1, 0x4d5, 0x81, 0x7fff, 0x17, 0x1, 0xc0000001}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b, 0x3506}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x19, 0x10, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@loopback, 0x1b, 0x14, 0x10}, @sadb_x_sec_ctx={0x201, 0x18, 0x2, 0x3, 0x1000, "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"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x8, {0x6, 0x33, 0x60000000000, 0x1db80000000000, 0x0, 0x100, 0x0, @in6=@local, @in=@remote}}]}, 0x10c8}}, 0x20008000) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='}ppp1\x00', 0x6, 0x3) 01:03:11 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0xc31, 0x8, 0x4, 0x4}) r2 = socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x5, 0x800) getpeername$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 01:03:11 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfc}, 0x10}}, 0x0) 01:03:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x2) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000240)={0x5, @output={0x1000, 0x0, {0x3f, 0x4b5}, 0x20, 0x10001}}) [ 311.692687] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 311.692687] program syz-executor3 not setting count and/or reply_len properly 01:03:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0x81) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000240)=""/4096) 01:03:12 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x8080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r2}}, 0xc) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 312.374594] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 312.374594] program syz-executor3 not setting count and/or reply_len properly 01:03:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bpq0\x00') 01:03:12 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) 01:03:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) [ 312.786596] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 312.786596] program syz-executor3 not setting count and/or reply_len properly 01:03:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700090200005e45c854892467fd00"], 0x10}}, 0x0) 01:03:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0xc64d) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r0], 0x28}}, 0x0) 01:03:13 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x10, 0x6, 0x5, 0x7, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x10000}, @sadb_x_nat_t_type={0x1, 0x14, 0xcd87}, @sadb_x_sa2={0x2, 0x13, 0x3f, 0x0, 0x0, 0x70bd26, 0x3501}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x38}}, 0x4008081) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="02070009020000c15500100000000000000000000000"], 0x10}}, 0x0) 01:03:13 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000060770000810000"], 0x10}}, 0x0) 01:03:13 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) fdatasync(r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000000000000000"], 0x10}}, 0x0) 01:03:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000977004e00000128a1cc675b9b9259"], 0x10}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0xa0000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000080)={0x565, 0x0, 0x3017, 0x7, 0x3, {0xda, 0x3f}, 0x1}) 01:03:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 313.847420] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 313.847420] program syz-executor3 not setting count and/or reply_len properly 01:03:13 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x20040) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000340)={0x100000100000009, 0x8001}) signalfd4(r0, &(0x7f0000000180)={0x4}, 0x8, 0x80000) accept4(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80, 0x80800) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}}, 0x0) 01:03:14 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "5686b0bc7af96e6f"}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009df0000000000000000000000"], 0x10}}, 0x0) [ 314.309164] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 314.309164] program syz-executor3 not setting count and/or reply_len properly 01:03:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r2, r3, 0xffffffffffef0001}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902000000000000000000000048fed9dce5b5a950033dba55dbf39eee5c1c0ec29540572bdb8a327fe2e19f7c989d64df6a4e10b28cd1b3e70434c5fe6a81b3c16e9e94decaaaa22bfa2ef1225e8844082b506d0c96b272598d15f66190437ec5be935c95733754748d9cd4435eb0f520c152adcb8be13aaa6256dd002bb7086f711e2c2c591389c47ae97683934e0000005e01400015053b792a29e4d915298bbd00f739dca64b93ccd03410038b5685c6727089cb206d206dd2f3b22814da196571b5ac4800de91f9f2d89ecd014abd83b3f2b422dcec1737f1fe64e567e4b51e6a476be970f8"], 0xeb}}, 0x0) 01:03:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:14 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:03:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x3bd4, @local, 0x8}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x9a, "d1d8fb02d95d503fa94e8a795fd71964eca56917f7d76d545968570c4c24827944507a2ca814eddc21e214db1c91c3b14f7ccd72265cb4c2614dc186f580f0956df6bb67574a583e68c32d8e20f1bb2daa3739321e20371e9059f36a22f4ed9337fa8884b10956d0a94c6de3b0883e4278595425dcfb81d46ff08ffa845cc34edadcf37e742c41efbd334d79a8ec3338bdcaac1022d25b2ee0c8"}, &(0x7f00000000c0)=0xa2) [ 314.739614] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 314.739614] program syz-executor3 not setting count and/or reply_len properly 01:03:14 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207000902fb6b52000000200000414ceb28420931b02557e9377ba70000000000"], 0x10}}, 0x0) 01:03:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 315.194966] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 315.194966] program syz-executor3 not setting count and/or reply_len properly 01:03:15 executing program 2: getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000200)="57a8e9d6b5294c2816219208399f855bcc5e826f71b2f68bfb2f6450b78c8585be7e6785f5dc61e2166fd3265d3e2d7c86a3a695804e81b81afdc7be59b790b9465b8bbb9afa28371ce1b9e73dcbfa3bd31d3a59bb1f11519bba372de89c50d6034d58ca8b4bbdb14f607215611bf7ad63e6be23e2360370a274837360c657900d92fbeeef4f26604723fbd19b37956597b3e09ac7a7ff916ad306c53870a984868852f439a11f7ce80b5d9cbfc3fc2a2a7cea1a8dc4dfe41bd64a", 0xbb, r0}, 0x68) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000180)=""/60, &(0x7f00000001c0)=0x3c) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x4000) 01:03:15 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x200000000000013d, 0x0, 0xfffffffffffffffd}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0xff, 0xfffffffffffffff9, 0x8, 0x1f, 0x7, 0x20000000000000, 0x994, 0x353, r2}, &(0x7f0000000280)=0x20) socket$key(0xf, 0x3, 0x2) accept(r0, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, &(0x7f0000000000)=0x80) 01:03:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = dup(r0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 01:03:15 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7fffffff, 0x101800) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x5a}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r2, 0x6}, &(0x7f0000000180)=0x8) [ 315.707764] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 315.707764] program syz-executor3 not setting count and/or reply_len properly 01:03:15 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="02070016269106487e515d8d0023fd6f879f50020000000000000000000000"], 0x10}}, 0x0) 01:03:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 316.065944] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 316.065944] program syz-executor3 not setting count and/or reply_len properly 01:03:16 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="e0000000090000004a931d55a1d6e561c3df3a77487d834fb085bf61c7ab4ee0fdacc85885b1a9eda11a6fc4959c2c5b5f3ad5a468ac6ce5f9c3d8465844ad4a71f6c0f16db449fc7e115c1afce3148e88bab7891b28286938121a8ca4f1885b6bafa18fb1377ecd50f9360b83be47040de398b24daac501cd2edb4fd3d3510880f9abb6773bb231d4cfbb460b2794b991a5abfdc76101971d7f4f24e0628d34a071f22fe8df264c47b86dfe2ae17be68aa90c2b79b08244fe1d30360800000006aaede10f4737e0c4dafdb584579ca8cc0000000000000000000000"], 0x200000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x20000, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000100)=0x4) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000080)={0x3, 'syz1\x00'}) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0207000903000000000000000000000001001400200000009c717058f423a40b2f54e6601199ad066ad3cea453478ed50e0904b65d443d0a00d5bcaf30149973b60a54790e6e2e29d70109c1e261b635fb76bb19d9e9a6cf629897fdb43330bea70a64a42000fd3bc5a549f579b83bd45fee6735550a887e3aaa87d337a764ca0f09de024c0dfa6950b74e7b14cfd2adc73591894c8db2b5444868543bfa62518f7f6a3008000000f44b132b1a72a57bd4be8d6da0341bb63fbf91467303bd976d68d926f92d7f959c734df9bfee1cfe5a7e3a7f6757e0be44ecb1b9c3cd308d1be46e8dc83ef55c07"], 0x18}}, 0x3) 01:03:16 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) signalfd4(r1, &(0x7f0000000200)={0x5}, 0x8, 0x80000) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x105000) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000001c0)=0xfffffffffffffff8) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x10000000016, &(0x7f00000000c0)) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000240)={0x35f91610, 0x8, 0x4, 0x2000, {}, {0x3, 0xc, 0x5, 0x80000000, 0x80000001, 0x2, ')\bi&'}, 0x7, 0x3, @fd=r2, 0x4}) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ptrace$poke(0x5, r3, &(0x7f0000000000), 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}, 0x10001}, 0x1c) 01:03:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="900282ec2ca0b3cca544b3d471833517ad7e8861042b5baf4a200a99efbc1e24dafde54a9be71ef44571778b8aea67845d8d51ca638129ad7766c10cb2a77ebb60b44e63d9b8ce3084593d10c710ba5218277a61f68de1cb4cb7c402151bc9b0da105c32820911461d8333b3c6b0376dd31a357e08820ff602b82dec517abaadc6fb3715edee0a88cccd7c62bdfc293dcece2365955aaffa5fcf8120c0cb1c5655503312249087552bd37173844fffd67600bf1f06363cf1e08736280effa502939acf50e2685b05eabfab1cdade8b43361b19c0e0a0722c4d295a772f907241f78be6c14aa3b0f4dec15f30d517b91e4d1afe10717e7aa743"], 0x10}}, 0x0) 01:03:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020400000000000000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x9, 0x5e4, 0x9, 0x2a, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_sec_ctx={0x14, 0x18, 0x9, 0x181, 0x94, "1ff68e2999a4eb4384284279e8d9476be34177dcc6239d2825bb01dbd6bc3845ec55fd19bdab9ed6e4bdf3bec63c339305ab0c0323ff5c5470bab98ac304b2fccae5ed377e9cda948448572f085297a28e34e89988a72d43a03c0a3695a1ddb5ebec2094e781197b52d41c0e0ddebd194c06d3cfc851860b80d964e4992669e19ee2d2c5caebe37908444f61e998d9228da53f2f"}, @sadb_x_sec_ctx={0xe, 0x18, 0x1000, 0x100, 0x61, "67a490a8dee835cb72a3cef640e6075344704f040640c1aea3604c8a448705d3f4778650a51242d23cc31b70dcd96c263833e0b07c7e1e19150888384989ba5a4a03201a598ed9d107f700eba8ca47fa314270918445dc2c5c3625426d7f47ba73"}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}]}, 0x150}}, 0x24008810) [ 316.426694] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 316.426694] program syz-executor3 not setting count and/or reply_len properly 01:03:16 executing program 1: socket$key(0xf, 0x3, 0x2) 01:03:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:16 executing program 4: getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000200)="57a8e9d6b5294c2816219208399f855bcc5e826f71b2f68bfb2f6450b78c8585be7e6785f5dc61e2166fd3265d3e2d7c86a3a695804e81b81afdc7be59b790b9465b8bbb9afa28371ce1b9e73dcbfa3bd31d3a59bb1f11519bba372de89c50d6034d58ca8b4bbdb14f607215611bf7ad63e6be23e2360370a274837360c657900d92fbeeef4f26604723fbd19b37956597b3e09ac7a7ff916ad306c53870a984868852f439a11f7ce80b5d9cbfc3fc2a2a7cea1a8dc4dfe41bd64a", 0xbb, r0}, 0x68) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000180)=""/60, &(0x7f00000001c0)=0x3c) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x4000) 01:03:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x200) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x7f, "c1ca298c4ac990c083434cfaf31eb353c9b2a206c994881d62af138230c0abad0187b635319293ae5480e27ab0b90aa1b241454c97a6423e0b9354e8763a5620bf8ad9607426819afda917c5d346690c5feb969177af6b4621259e74d97e240693f64e7971e77f6c1eef2c390ec4cfada0529a20233e1c2ddddfb4e225464a"}, &(0x7f0000000080)=0x87) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x8000, 0x1a8c, 0xa5, 0x637f, 0x4eabcfb8}, &(0x7f0000000240)=0x14) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 316.676031] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 316.676031] program syz-executor3 not setting count and/or reply_len properly 01:03:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) socket$caif_stream(0x25, 0x1, 0x1) 01:03:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 317.073628] ptrace attach of "/root/syz-executor0"[12400] was attempted by "/root/syz-executor0"[12435] 01:03:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x9, 0x1a, 0x0, 0x0, 0x0, [@sadb_key={0x11, 0x9, 0x400, 0x0, "96e8e941ae65e596590ea09c86e98d8e2bab2058d03674e31e6e2e59c4a20143cc4751f6c817b09e5a82967494e6b86a1e6d46f1e470b18b7674e855f22c5e49435806e8adbaa7847fd2dd35f871884ca1f39932703c14b3da4e47b4838b017cec2a97c53021c82f236716e5aabb2fb6e50e8c3386a46a4c8b020953c3b55dd2"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @loopback}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}]}, 0xd0}}, 0x0) [ 317.120135] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 317.120135] program syz-executor3 not setting count and/or reply_len properly 01:03:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="02078009000100009d9e0853e58a814399fbd5b486dd4106b9"], 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) r2 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='/dev/hwrng\x00', 0xfffffffffffffff9) keyctl$assume_authority(0x10, r2) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000100)={'nr0\x00', {0x2, 0x4e23, @local}}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c}) 01:03:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0x100}, 0x10}}, 0x0) [ 317.651483] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 317.651483] program syz-executor3 not setting count and/or reply_len properly [ 317.691124] IPVS: ftp: loaded support on port[0] = 21 01:03:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:18 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x200000) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000080)={0xb, 0x3, 0x7fffffff}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:18 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="02070009020000a86eae000004000000000000"], 0x10}}, 0x0) [ 318.112460] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 318.112460] program syz-executor3 not setting count and/or reply_len properly [ 318.146919] chnl_net:caif_netlink_parms(): no params data found [ 318.249139] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.255907] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.264372] device bridge_slave_0 entered promiscuous mode [ 318.304282] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.310810] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.319317] device bridge_slave_1 entered promiscuous mode 01:03:18 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = semget$private(0x0, 0x0, 0x5ca) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000080)=""/68) r3 = gettid() tgkill(r1, r3, 0x3e) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000000600000000"], 0x10}}, 0x0) [ 318.360836] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 318.426863] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 318.608157] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 318.616937] team0: Port device team_slave_0 added [ 318.657534] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 318.666401] team0: Port device team_slave_1 added [ 318.717964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 318.740410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 318.816406] device hsr_slave_0 entered promiscuous mode [ 318.852317] device hsr_slave_1 entered promiscuous mode [ 318.905448] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 318.913295] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 318.948950] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.955546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.962740] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.969272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.102698] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 319.108864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.123269] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 319.131812] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.144660] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.159546] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 319.190504] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 319.197761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.205574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.219268] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 319.225481] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.241146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 319.248662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.257473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.267439] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.274078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.292525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 319.299742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.308555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.318108] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.324662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.342158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 319.349210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.368464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 319.377740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.393728] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 319.403801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.413332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.426041] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.438062] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 319.447814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.457948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.475503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 319.485899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.494339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.510426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 319.519845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.528362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.542693] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 319.548770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.578230] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 319.601388] 8021q: adding VLAN 0 to HW filter on device batadv0 01:03:20 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x6) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x9, 0x219, 0x0, 0x70bd2b, 0x0, [@sadb_sa={0x2, 0x1, 0x4d5, 0x81, 0x7fff, 0x17, 0x1, 0xc0000001}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b, 0x3506}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x19, 0x10, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@loopback, 0x1b, 0x14, 0x10}, @sadb_x_sec_ctx={0x201, 0x18, 0x2, 0x3, 0x1000, "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"}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x8, {0x6, 0x33, 0x60000000000, 0x1db80000000000, 0x0, 0x100, 0x0, @in6=@local, @in=@remote}}]}, 0x10c8}}, 0x20008000) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='}ppp1\x00', 0x6, 0x3) 01:03:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000180)={0x20, 0x2, &(0x7f00000000c0)="be7a69e08fedca434c0e69e9b43b4c55f40086646b1f52ef2f3de530c5ff727b5cc56ca6e17b18b138a24f4b2076b6191a34d528ebcae20f99660a3dda0582fe3d3a8bc972fc4041e14deeb81cf4b41acf8c55891c4eba8aa64962a61ff587fde56e2807bc3d3bbdb02bd44c3e62cdd5d3a1d1792824ad10404280772c97b733621205fbd1edae537232ae330bf126d61e341ac6de806c9c3c5642d25f844c3b6fa254109a47d5ae904f7372c6d57d389260ec9d16d50769", {0xff, 0x20, 0x7f777f5f, 0x0, 0x4, 0x1, 0xf, 0x2}}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207000902999f85ce74f80000000000000900000000000000000000"], 0x10}}, 0x0) 01:03:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x7, 0x8, 0xf, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) 01:03:20 executing program 0: r0 = dup(0xffffffffffffffff) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) write$eventfd(r0, &(0x7f0000000040)=0x400, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0200"], 0x10}}, 0x0) [ 320.021152] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 320.021152] program syz-executor3 not setting count and/or reply_len properly 01:03:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x80) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000080)={0x3, 0x80008, "c211fa9f6bf47b38bbb524ac0eadb58d437999cbaf2f3c6b", {0xa84b, 0x3}, 0x5}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070089020000000000000000000800"], 0x10}}, 0x0) 01:03:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ptype\x00') ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[]}}, 0x4) 01:03:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="02076352000074b2e6ea002b5dd2d3528dcb4c49ebf2b403f82a43c73f7f83700dc16704de4b9f1889b515c138406a074286b7499170f77398d22463d99504331945f8ff657225f5129e5a643c4526b15e826086177f46ac0a07aa80a54cc133b9e2fd52447142c63c1df9a096daceae4752077f15dadbc60483e8e4e7b42a6d9b332c37e39dd0357aae33e8aeaf316e20ead30752f3b06a144e881c8630c2a8bc24c8ce9d81714b57748ee9afeb33027333369c0cd7f6e8ee"], 0x10}}, 0x0) 01:03:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x106000], 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:20 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x100, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x20, 0x2) [ 320.478891] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 320.478891] program syz-executor4 not setting count and/or reply_len properly [ 320.517040] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 320.517040] program syz-executor3 not setting count and/or reply_len properly 01:03:20 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x5, 0x1f, 0x0, 0x0, 0xffffffffffffffff, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_key={0xb, 0x9, 0x278, 0x0, "52a17b923891e24b16485ccb9f99051516b4fc3f6f2c9cb087c00516053eda62d91e093f82ba08da5fb9815719f3ff0c29dc79b5e07107d96a87be40e72ab68da6ce073d57bb3bb10de839de3e562a"}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e21, 0x9, @mcast1}}, @sadb_address={0x3, 0x0, 0xff, 0xa0, 0x0, @in={0x2, 0x4e20, @local}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3f}, @sadb_address={0x5, 0x17, 0x3c, 0x20, 0x0, @in6={0xa, 0x4e20, 0x401, @mcast2, 0x1}}]}, 0xf8}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) 01:03:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000000000de0000"], 0x10}}, 0x0) 01:03:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:21 executing program 1: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00') r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000300)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x7, 0x10000, 0x9, 0x2}, 0x10}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000080)=""/116, &(0x7f0000000100)=0x74) [ 320.935321] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 320.935321] program syz-executor3 not setting count and/or reply_len properly 01:03:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:21 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x400) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x16, 0x1, 0x7}}, 0x14) 01:03:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x820000) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x1, 0x1, 0x4, 0x0, {0x0, 0x2710}, {0x2, 0x8, 0x7ff, 0x1, 0x3, 0x9, "c0268810"}, 0x1, 0x3, @fd=r0, 0x4}) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x9, 0x37, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bb8, 0x3, {0x6, 0x2b, 0x13b991e9, 0x80000000, 0x0, 0x9, 0x0, @in=@remote, @in=@multicast1}}, @sadb_key={0xd, 0x9, 0x2e8, 0x0, "4b47db27ae34d592f7677a737b956a36c4fc8d32c428ebbbfac8663ed1598a4e7c503ea24b28c5609fc76eb5d8a5dbe9258fac2e9dbda5d45dfeb69faa1b52552006ffcd92d87d62a5de85f299cbacb71cb8381ac54a69076eb1ebb1ea"}, @sadb_sa={0x2, 0x1, 0x4d3, 0x9e, 0x7fff, 0xa5, 0x2, 0x40000001}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bbd, 0x6, {0x6, 0x6f, 0x4, 0x336, 0x0, 0xca6, 0x0, @in6, @in=@loopback}}, @sadb_key={0x16, 0x9, 0x538, 0x0, "14923ee2a433e13c4a0d2d56ba314a8346d94573f6c03cc62e48a72e388c1b19cba052e18646d3065332c3c65e97e3965fb56cb7c3f73429bb97b40b2d705cc960813cd7bd2f5b93cc2401cb062b4a201ce80557e73ba95fa1089f9d200eb0cc6ef1a25b9845dfb673908a34ea97da1152e8011001fd56af3a3b1620bf649cfc5f88b1fb7b4291d42d90fed5c515aa0dcc886883a0d900b9f600aa68d98ecdb6e84b349bd87b2a"}]}, 0x1b8}}, 0x0) [ 321.420875] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 321.420875] program syz-executor3 not setting count and/or reply_len properly [ 321.531205] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 321.531205] program syz-executor4 not setting count and/or reply_len properly [ 321.577046] vivid-003: ================= START STATUS ================= [ 321.584155] vivid-003: Test Pattern: 75% Colorbar [ 321.589051] vivid-003: Fill Percentage of Frame: 100 [ 321.594375] vivid-003: Horizontal Movement: No Movement [ 321.599796] vivid-003: Vertical Movement: No Movement [ 321.605118] vivid-003: OSD Text Mode: All [ 321.609306] vivid-003: Show Border: false [ 321.613548] vivid-003: Show Square: false [ 321.617734] vivid-003: Sensor Flipped Horizontally: false 01:03:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 321.623375] vivid-003: Sensor Flipped Vertically: false [ 321.628793] vivid-003: Insert SAV Code in Image: false [ 321.634215] vivid-003: Insert EAV Code in Image: false [ 321.639538] vivid-003: Reduced Framerate: false [ 321.644300] vivid-003: Enable Capture Cropping: true [ 321.649439] vivid-003: Enable Capture Composing: true [ 321.654719] vivid-003: Enable Capture Scaler: true [ 321.659694] vivid-003: Timestamp Source: End of Frame [ 321.665006] vivid-003: Colorspace: sRGB [ 321.669060] vivid-003: Transfer Function: Default [ 321.674019] vivid-003: Y'CbCr Encoding: Default [ 321.678737] vivid-003: HSV Encoding: Hue 0-179 [ 321.683409] vivid-003: Quantization: Default [ 321.687861] vivid-003: Apply Alpha To Red Only: false [ 321.693146] vivid-003: Standard Aspect Ratio: 4x3 [ 321.698036] vivid-003: DV Timings Signal Mode: Current DV Timings [ 321.704364] vivid-003: DV Timings: 640x480p59 inactive [ 321.709689] vivid-003: DV Timings Aspect Ratio: Source Width x Height [ 321.716373] vivid-003: Maximum EDID Blocks: 2 [ 321.720920] vivid-003: Limited RGB Range (16-235): false [ 321.726492] vivid-003: Rx RGB Quantization Range: Automatic [ 321.732315] tpg source WxH: 640x360 (Y'CbCr) [ 321.736755] tpg field: 1 [ 321.739463] tpg crop: 640x360@0x0 [ 321.743018] tpg compose: 640x360@0x0 [ 321.746758] tpg colorspace: 8 [ 321.749894] tpg transfer function: 0/0 [ 321.753895] tpg Y'CbCr encoding: 0/0 [ 321.757653] tpg quantization: 0/0 [ 321.761138] tpg RGB range: 0/2 [ 321.764434] vivid-003: ================== END STATUS ================== [ 321.776968] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 321.776968] program syz-executor3 not setting count and/or reply_len properly [ 321.784144] vivid-003: ================= START STATUS ================= [ 321.800265] vivid-003: Test Pattern: 75% Colorbar [ 321.805289] vivid-003: Fill Percentage of Frame: 100 [ 321.810441] vivid-003: Horizontal Movement: No Movement [ 321.816069] vivid-003: Vertical Movement: No Movement [ 321.821310] vivid-003: OSD Text Mode: All [ 321.825622] vivid-003: Show Border: false [ 321.829833] vivid-003: Show Square: false [ 321.834154] vivid-003: Sensor Flipped Horizontally: false [ 321.839735] vivid-003: Sensor Flipped Vertically: false [ 321.846381] vivid-003: Insert SAV Code in Image: false [ 321.851894] vivid-003: Insert EAV Code in Image: false [ 321.857234] vivid-003: Reduced Framerate: false [ 321.862051] vivid-003: Enable Capture Cropping: true [ 321.867372] vivid-003: Enable Capture Composing: true [ 321.872674] vivid-003: Enable Capture Scaler: true [ 321.877642] vivid-003: Timestamp Source: End of Frame [ 321.882959] vivid-003: Colorspace: sRGB [ 321.886995] vivid-003: Transfer Function: Default [ 321.891965] vivid-003: Y'CbCr Encoding: Default [ 321.897177] vivid-003: HSV Encoding: Hue 0-179 [ 321.901870] vivid-003: Quantization: Default [ 321.906326] vivid-003: Apply Alpha To Red Only: false [ 321.911554] vivid-003: Standard Aspect Ratio: 4x3 [ 321.916510] vivid-003: DV Timings Signal Mode: Current DV Timings [ 321.922849] vivid-003: DV Timings: 640x480p59 inactive [ 321.928176] vivid-003: DV Timings Aspect Ratio: Source Width x Height [ 321.934889] vivid-003: Maximum EDID Blocks: 2 [ 321.939438] vivid-003: Limited RGB Range (16-235): false [ 321.945021] vivid-003: Rx RGB Quantization Range: Automatic [ 321.950778] tpg source WxH: 640x360 (Y'CbCr) [ 321.955277] tpg field: 1 [ 321.958005] tpg crop: 640x360@0x0 [ 321.961496] tpg compose: 640x360@0x0 [ 321.965308] tpg colorspace: 8 [ 321.968443] tpg transfer function: 0/0 [ 321.972434] tpg Y'CbCr encoding: 0/0 [ 321.976179] tpg quantization: 0/0 [ 321.979655] tpg RGB range: 0/2 [ 321.982958] vivid-003: ================== END STATUS ================== 01:03:22 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x82) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) mlock(&(0x7f00002ca000/0x2000)=nil, 0x2000) 01:03:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="02d801004f40ac6bac9a86000008000000000000017cafcb40e1f4a30100"], 0x10}}, 0x0) 01:03:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 322.254735] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 322.254735] program syz-executor3 not setting count and/or reply_len properly 01:03:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x402, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d00068100000000000000fe1e1e2534010a74c9be341ed4835ac117846af707330fda7f"], 0x10}}, 0x10000) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[0x20, 0x8, 0x3f, 0x0, 0x400]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000340)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x10001, @empty, 0x9}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}], 0x4c) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000100)={'teql0\x00'}) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) 01:03:22 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xa) inotify_init1(0x800) 01:03:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:22 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x4, 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070c09020000000082b312a1715528449bfb0d"], 0x10}}, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) migrate_pages(r2, 0x7, &(0x7f0000000100)=0x7, &(0x7f0000000140)=0x2) 01:03:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0xeb2, 0x5}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) ioctl$SG_IO(r0, 0x2285, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:23 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x82) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r3}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) mlock(&(0x7f00002ca000/0x2000)=nil, 0x2000) 01:03:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:23 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) write$evdev(r0, &(0x7f00000001c0)=[{{0x0, 0x7530}, 0x17, 0x7c60082b, 0x6}], 0x18) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x4, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)='nr0\x00', 0xff, 0x6, 0x3}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/1) 01:03:23 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x3c, 0x5, 0xfffffffffffff800, "a0eb0b67184d4aec3caa0bbfa0a968f776d22bb5db272fbe26f36d62a23c62bee31bad7ddf50baa353bfeb96e2c35a0741f65c843a54e821bc0e5f41"}) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) restart_syscall() r2 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="3bb742b2bf42c09c47957eb1a04130781e760bc45bd83ae3e914644e4d21a0cd0d3cca49fbb77802e7b0d8a73cf1e95e9ddf8d460d19fd106f9688d2bf0bcfe8b8cde6ef9bf2dfc33b02129ee112fee8c52de163af8fba4f6b7757d8b0fa9a818106537f5b00d61d720aa657cf27b5ab22070e7ee08fc6f85a2b8516d44ab31e7c8835e0023512c87d9af6f919111db886b6b130b92838f851fbac8c5d3ac1ea89d180853a9460a05b86d178c9dcc9a8bad18301295a4ab533c2286efeedbf022aeea34932967edab7b73a00ef6a43f7dae89f107c8e4f42c0133037", 0xdc, 0xfffffffffffffffd) keyctl$get_security(0x11, r2, &(0x7f0000000400)=""/223, 0xdf) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x100000001, 0x0, 0x0, 0x2}, 'syz0\x00', 0x24}) 01:03:23 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) poll(&(0x7f0000000040)=[{r0, 0x20}, {r0}, {r0, 0x8000}], 0x3, 0x5) [ 323.633990] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 323.633990] program syz-executor3 not setting count and/or reply_len properly [ 323.690290] QAT: Invalid ioctl [ 323.959612] QAT: Invalid ioctl 01:03:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000a060000080000000000"], 0x10}}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x100}) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) 01:03:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000000000000000000051705e5fb3e7ca00"], 0x10}}, 0x0) 01:03:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2a00, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x6, 0x3, 0x1, 0x100000000, 'syz1\x00', 0x9}, 0x4, 0x4, 0xffff, r2, 0x4, 0x100000001, 'syz0\x00', &(0x7f00000000c0)=[',&\x00', '\\\x00', 'wlan1#\x00', 'ð1-!,-\'\xdavmnet0\x00'], 0x1e, [], [0x7d1e, 0x8, 0x9, 0x7d]}) connect$l2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x3, 0x2, 0x1, {0xa, 0x4e20, 0x3f, @mcast1}}}, 0x32) 01:03:24 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x3c, 0x5, 0xfffffffffffff800, "a0eb0b67184d4aec3caa0bbfa0a968f776d22bb5db272fbe26f36d62a23c62bee31bad7ddf50baa353bfeb96e2c35a0741f65c843a54e821bc0e5f41"}) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) restart_syscall() r2 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="3bb742b2bf42c09c47957eb1a04130781e760bc45bd83ae3e914644e4d21a0cd0d3cca49fbb77802e7b0d8a73cf1e95e9ddf8d460d19fd106f9688d2bf0bcfe8b8cde6ef9bf2dfc33b02129ee112fee8c52de163af8fba4f6b7757d8b0fa9a818106537f5b00d61d720aa657cf27b5ab22070e7ee08fc6f85a2b8516d44ab31e7c8835e0023512c87d9af6f919111db886b6b130b92838f851fbac8c5d3ac1ea89d180853a9460a05b86d178c9dcc9a8bad18301295a4ab533c2286efeedbf022aeea34932967edab7b73a00ef6a43f7dae89f107c8e4f42c0133037", 0xdc, 0xfffffffffffffffd) keyctl$get_security(0x11, r2, &(0x7f0000000400)=""/223, 0xdf) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x100000001, 0x0, 0x0, 0x2}, 'syz0\x00', 0x24}) 01:03:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 01:03:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:24 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) msgget$private(0x0, 0x40) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020000fbffffff000000000000000000"], 0x10}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) ioprio_set$uid(0x3, r1, 0x0) [ 324.735184] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 324.735184] program syz-executor3 not setting count and/or reply_len properly 01:03:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x4}, [{0x2, 0x1, r1}], {0x4, 0x4}, [{0x8, 0x5, r2}], {0x10, 0x6}, {0x20, 0x7}}, 0x34, 0x3) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="df06ff09020000000000000000000000"], 0x10}}, 0x0) 01:03:25 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:25 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x20004) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x5, 0x2a802) setxattr$security_smack_entry(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f0000000440)='ppp0^%userbdev\\ppp0^user\x00', 0x19, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x931, &(0x7f00000001c0)={0x6}, 0x8) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) getpeername(r0, &(0x7f0000000480)=@ethernet={0x0, @link_local}, &(0x7f0000000300)=0xfffffffffffffeb2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='vcan0\x00\x00\x00\x16\x00', 0x10) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="55000000a6000000c7fedd974aedfc56425e572f032bbe4174da324d9247388b364a9acabe400a8286667cdf0749b5056bd719ab9c9b7ef5e58a0259cd1439f66907f2685ffb880b30ee5179800a9294ee6794a805"], &(0x7f00000002c0), 0x0) sendto$inet(r0, &(0x7f0000000040)="5818cdf92beb7b19c0115477a0ee019348c90270f3", 0x15, 0x4000010, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000200)='\x00', 0x1, 0x0, 0x0, 0x0) 01:03:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) fcntl$notify(r0, 0x402, 0x12) 01:03:25 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 325.493636] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:03:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:25 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700090200000000000000ae000000"], 0x10}}, 0x0) clock_gettime(0x0, &(0x7f0000002080)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000000080)=""/35, 0x23}, 0x1ff}, {{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001440)=""/157, 0x9d}, {&(0x7f0000001500)=""/228, 0xe4}, {&(0x7f0000001600)=""/91, 0x5b}], 0x3, &(0x7f00000001c0)=""/26, 0x1a}, 0x5}, {{&(0x7f0000001680)=@nfc_llcp, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/252, 0xfc}, 0x7}, {{&(0x7f0000001840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001900)=[{&(0x7f00000018c0)=""/41, 0x29}], 0x1, &(0x7f0000001940)=""/155, 0x9b}, 0x2}, {{&(0x7f0000001a00)=@ax25={{0x3, @null}, [@bcast, @netrom, @bcast, @rose, @null, @null, @default]}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001a80)=""/60, 0x3c}, {&(0x7f0000001ac0)=""/220, 0xdc}, {&(0x7f0000001bc0)=""/95, 0x5f}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/12, 0xc}, {&(0x7f0000001d00)=""/44, 0x2c}, {&(0x7f0000001d40)=""/120, 0x78}, {&(0x7f0000001dc0)=""/101, 0x65}], 0x8, &(0x7f0000001ec0)=""/124, 0x7c}}], 0x5, 0x1, &(0x7f00000020c0)={r1, r2+10000000}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001700)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0xffff) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000002100)='@-^\x00', 0x4) 01:03:25 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) dup3(r0, r0, 0x7ffff) 01:03:26 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000080)=0x63, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, 0x0, 0x0) 01:03:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x400000, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x200, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x2601) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r3, 0x0, 0x6, &(0x7f00000000c0)='-bdev\x00', r4}, 0x30) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:26 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2000, 0x0) 01:03:26 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000080)=0x63, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f0000000280), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, 0x0, 0x0) 01:03:26 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)={0x2, 0x7, 0x0, 0xd, 0x3d, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x81, 0x6, 0x5, 0x8}, @sadb_key={0x21, 0x8, 0x7f0, 0x0, "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"}, @sadb_ident={0x2, 0xa, 0x80000000, 0x0, 0x8}, @sadb_lifetime={0x4, 0x4, 0x3, 0x0, 0x100000000, 0xf51}, @sadb_x_sec_ctx={0xe, 0x18, 0xd59, 0x101, 0x65, "900bf7ca080b0c58fa7ead7c558c9eb1e953a91d3b88f2cd549d8fd5f4432730c20423bbc59d5fd58fc93416239060e979b8ff775a22a07d45bab77def026f0bad9715462663a0b3e9479491cd0b2ca003a90558b4018250395e8fb7a7551c80b68509d58c"}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}]}, 0x1e8}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/autofs\x00', 0x80200, 0x0) sendmsg$rds(r1, &(0x7f0000001dc0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/236, 0xec}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000340)=""/183, 0xb7}], 0x4, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{0x7ff, 0x6}, {&(0x7f0000000400)=""/245, 0xf5}, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/29, 0x1d}, {&(0x7f0000000540)=""/49, 0x31}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000000600)=""/215, 0xd7}, {&(0x7f0000000700)=""/219, 0xdb}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000000900)=""/236, 0xec}], 0x7, 0x31, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0xbcc}, {&(0x7f0000000a80)=""/53, 0x35}, &(0x7f0000001c00)=[{&(0x7f0000000ac0)=""/185, 0xb9}, {&(0x7f0000000b80)=""/107, 0x6b}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x3, 0x8, 0x100}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80, 0x3}, &(0x7f0000001c40)=0xb42f, &(0x7f0000001c80)=0x5, 0x73, 0x1, 0x0, 0xda7b, 0x70, 0x5}}], 0xe8}, 0x81) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000001e80)=0x601) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000001e00)={0x4, [0x100000001, 0xfff, 0x6, 0xe937]}, 0xc) 01:03:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:26 executing program 4: r0 = epoll_create1(0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x181000) fcntl$setsig(r1, 0xa, 0x17) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x1) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xe0000004}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) accept4$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) accept4$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14, 0x800) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@ipv4={[], [], @initdev}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000840)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) getpeername$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x66ae3839a90deea5, &(0x7f0000000a80)={@mcast2, 0x0}, &(0x7f0000000ac0)=0x14) getpeername$packet(r1, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) accept$packet(r1, &(0x7f0000000b80)={0x11, 0x0, 0x0}, &(0x7f0000000bc0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000d00)=0xe8) recvmsg$kcm(r1, &(0x7f0000002040)={&(0x7f0000000d40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000dc0)=""/17, 0x11}, {&(0x7f0000000e00)=""/171, 0xab}, {&(0x7f0000000ec0)=""/255, 0xff}, {&(0x7f0000000fc0)=""/43, 0x2b}], 0x4, &(0x7f0000001040)=""/4096, 0x1000}, 0x40000000) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000002080)={@empty, 0x0}, &(0x7f00000020c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002100)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@loopback}}, &(0x7f0000002200)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000002240)={@loopback, 0x0}, &(0x7f0000002280)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000022c0)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000002300)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002340)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000002440)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002540)={0x0, @remote, @broadcast}, &(0x7f0000002580)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000025c0)={{{@in=@initdev, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f00000026c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000027c0)={@initdev, @empty, 0x0}, &(0x7f0000002800)=0xc) accept$packet(r1, &(0x7f0000002840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002880)=0x14) accept$packet(r3, &(0x7f00000028c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002900)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000029c0)={0x0, @broadcast, @loopback}, &(0x7f0000002a00)=0xc) accept$packet(r1, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a80)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002ac0)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000002b00)={@mcast1, 0x0}, &(0x7f0000002b40)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000004680)={@remote, @dev, 0x0}, &(0x7f00000046c0)=0xc) accept$packet(r1, &(0x7f0000004780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000047c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004800)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000004900)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000004940)={0x0, @multicast2, @dev}, &(0x7f0000004980)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000049c0)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000004ac0)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000004bc0)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000004c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004c40)={'team0\x00', 0x0}) accept$packet(r1, &(0x7f0000004c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004cc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000004d00)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000004e00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004e40)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000004f40)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004f80)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000005080)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000006480)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000006580)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000074c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000007480)={&(0x7f00000065c0)={0xeb4, r4, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x1e4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xc59}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffff}}}]}}, {{0x8, 0x1, r11}, {0x260, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x742}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x1e8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r22}, {0x16c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x2, 0x1d9, 0x1, 0x7}, {0x1a, 0x2, 0x8d, 0x271e6245}, {0x80000000, 0x81, 0xf9d, 0x81}, {0x7, 0xc6d, 0x3, 0xff}, {0x7, 0x3, 0x7fffffff, 0x9}, {0x2, 0xed, 0x1, 0x2}, {0x2, 0xca97, 0x9, 0x100000000}, {0x68b, 0x0, 0xffffffff, 0x9f}, {0x8, 0x8, 0x1f, 0x309e}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r24}, {0x208, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x1, 0x9, 0xcf, 0x6}, {0x2, 0x8, 0x7, 0x1}, {0x5, 0x10000, 0x80000001, 0x40}, {0x3e, 0x5, 0x7935, 0x30b}, {0x10000, 0x3, 0x5, 0x1}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r29}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r30}}, {0x8}}}]}}, {{0x8, 0x1, r31}, {0x138, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r32}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r33}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r34}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r35}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r36}, {0x178, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r37}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r38}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r39}, {0x210, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r40}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0xff, 0x7, 0xc7, 0xae3}, {0x7fffffff, 0x5, 0x7ff, 0x5}, {0x100000000, 0xfffffffffffffffd, 0x80000000, 0xff}, {0x6, 0x6, 0x3, 0x3}]}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x4, 0x5c, 0x81, 0x8}, {0x401, 0x1, 0x2, 0xbd5}, {0x95e2, 0xf1, 0x2, 0x7}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r41}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r42}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x5, 0x4, 0x7f, 0x355}, {0x94f3, 0x6, 0x200, 0xff80000000000000}, {0xf2, 0x3f, 0x4, 0x7ff}, {0x8, 0x5, 0x8bf1, 0x100}, {0x2, 0x2, 0x16, 0x7fff}, {0x3, 0xffffffff, 0x101, 0x3f}, {0x1f, 0xffff, 0x51, 0x5}, {0xff, 0x20, 0x3, 0x6}, {0x8000, 0x81, 0xd111, 0x2}]}}}]}}]}, 0xeb4}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000004) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f00000000c0), 0x8) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x4, 0x80100) [ 326.985189] sg_write: data in/out 1818846731/4 bytes for SCSI command 0x0-- guessing data in; [ 326.985189] program syz-executor3 not setting count and/or reply_len properly 01:03:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x650041, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1f, 0x0, 0xffffffffffffffff, 0x4b5}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0xe2fa}, &(0x7f0000000140)=0x8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x2, 0x6, @remote}, 0x10) 01:03:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x408c02, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80801}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 01:03:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0xa600, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) fchmod(r1, 0x111) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[]}}, 0x40) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000004, 0x10010, r1, 0x0) 01:03:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0xff64) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000140)={0x8e10, 0x1, 0x9, 0x9, 0x7fff, 0xfff}) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x100000000000032b, &(0x7f0000000200)=""/20, 0x14}, 0x10001) 01:03:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000240)=@v2={0x3, 0x2, 0x13, 0x4, 0x8b, "c0413efeb22f6582acc190a5b0c06e55bebce87a21fb80302d7fa6719688b13f26972c2a73346249877d906eaad60016384fa6d5eb9fee0140f70eaf4c6656e6f73468ef67ec0a11967c24aaf263ed393cf28f27c3a6b8f9a52ebb6fc017bf2a28f7e9ac21c5dc9faa010ce579cfe3acdcb3d718b592e665f9ad8bba229e9cb7928b335583a8b789bb4e30"}, 0x95, 0x0) r1 = semget$private(0x0, 0x0, 0x540) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sched_getparam(r2, &(0x7f00000000c0)) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000001c0)=""/60) 01:03:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) 01:03:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x1000000000000000, 0x20000000000002da, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) 01:03:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x2, &(0x7f00000001c0)={0x5}, 0x8) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 01:03:28 executing program 4: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0xfffe, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) getsockname(r1, &(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x80) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast1, 0x4e21, 0x6, 0x4e20, 0x79, 0xa, 0x80, 0x20, 0xe7, r2, r3}, {0x2, 0xfffffffffffffff8, 0xcc48, 0x6, 0x4, 0x8001, 0x3ff, 0x100000001}, {0x7f, 0x81, 0x0, 0x522}, 0x9, 0x6e6bbc, 0x1, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d2, 0x6f}, 0xa, @in=@remote, 0x3504, 0x0, 0x3, 0xc6a, 0x20, 0x7, 0x8}}, 0xe8) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000140)) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0x9, @output}) 01:03:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:28 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x282, 0x1) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000080)={0xf, 0x6, {0x51, 0x0, 0x40, {0x6, 0x3}, {0x400, 0x100}, @rumble={0x2, 0x6}}, {0x56, 0xfe0000000000, 0x80, {0x8, 0xebec}, {0x9, 0x80e}, @ramp={0x7, 0x4, {0x7ff, 0x363aba79, 0x37024d1d, 0xfff}}}}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:28 executing program 4: 01:03:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0xfffffffffffffffe, 0x9, 0x2}, 0x10}}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0xa3, 0x4) 01:03:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@fd], &(0x7f0000000280)=[0x0]}}}], 0x0, 0x0, &(0x7f0000002000)}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) 01:03:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x7, 0x35, 0x10000, 'queue1\x00', 0x3}) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x70, 0x1, 0x7, 0xfffffffffffffeff, 0x1, 0x0, 0xf94, 0x30040, 0x0, 0x1, 0x7, 0x0, 0x231a7add, 0xff, 0x8000, 0xfda, 0x3, 0x1, 0x8, 0x2, 0x3, 0x101, 0x30000000, 0x3fa, 0x400, 0x1, 0x5, 0x4, 0x4, 0xfff, 0x2f7, 0x8, 0x4, 0xfffffffffffffff2, 0x10000000000000, 0x5, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000100)}, 0x40, 0x6, 0xfc, 0x1, 0x7, 0xff1, 0x20}, r0, 0x9, r0, 0x2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000001280)=0x1008) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000012c0)={r1, 0x7}, &(0x7f0000001300)=0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001340)={0x1, [0xfffffffffffffffc]}, &(0x7f0000001380)=0x6) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000013c0)={r1, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000001400)=0x401, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001440)={@remote, 0x0}, &(0x7f0000001480)=0x14) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000014c0)) write$P9_RLOCK(r0, &(0x7f0000001500)={0x8, 0x35, 0x1, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000001540)={r2, 0x0, 0x8001}, 0x8) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000015c0)={0x2, &(0x7f0000001580)=[{0x7, 0x9}, {0x100000000, 0x2}]}) sendto$rxrpc(r0, &(0x7f0000001600)="63514f70bc6e6bd43cce3140cf38a3f9f1885713a906ef999de1811ca76e00027b0baa8477387671292aff96e182acdadcd71d0553331b824ddc79d01b5552e23ed2864a58453dc51f73635038d9804d4b9409dbf1", 0x55, 0x4000844, &(0x7f0000001680)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x7ff}}, 0x24) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000016c0)=0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000001700)) bind$packet(r0, &(0x7f0000001740)={0x11, 0x15, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000001780)={0x8, 0x0, 'client0\x00', 0xffffffff80000000, "753e4f6c06ab824a", "a4cdfaced9dc3b6dfaee0506cd7c81586cd6d482f32fe9d40e3d8f1587618b05", 0x1, 0x1}) get_robust_list(r4, &(0x7f0000001900)=&(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)}}, &(0x7f0000001940)=0x18) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000001980)=0x8f) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000019c0)={0x100, @tick=0x3, 0x10001, {0x2, 0x1}, 0x1000, 0x0, 0x86}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000001a40)={0x2, @capture={0x1000, 0x1, {0x17f7, 0x36d}, 0x1ff, 0x7}}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000001b40)={0xad, 0x101}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001b80)={0xffffffff, 0x0, 0x8204, 0x4, 0x42d, 0x6, 0x4, 0x6, r1}, 0x20) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000001bc0)=0x100000001) renameat2(r0, &(0x7f0000001c00)='./file0\x00', r0, &(0x7f0000001c40)='./file0\x00', 0x2) syz_open_dev$usb(&(0x7f0000001c80)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x85897cd606e3a322, &(0x7f0000001cc0), &(0x7f0000001d00)=0x10) ioprio_set$pid(0x1, r4, 0x3) [ 329.015284] binder: 13044:13048 got transaction with fd, -1, but target does not allow fds [ 329.024092] binder: 13044:13048 transaction failed 29201/-1, size 24-8 line 3077 01:03:29 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000700)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r1, r0, 0x0) [ 329.182478] binder: undelivered TRANSACTION_ERROR: 29201 01:03:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x400000, 0x0) bind$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0xe10d, @ipv4={[], [], @empty}, 0xa38}, {0xa, 0x4e21, 0x4, @loopback, 0x8}, 0x81, [0x8, 0x4, 0x6, 0x3, 0x7fff, 0x3, 0x10000, 0xfffffffffffffb91]}, 0x5c) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000044000100019c8100010000000000002bd8e3e900963fc6f60000f1272ec40c5c04ebabcdaae7f02c08830ee04f276b7db864a4c0d86b8255cfd78aacc8c0dea06151bc7b6eafbb930c2129c8abf54b083e3e5fe97dec3dd98db264e687d031f3e1f58c5c105266302f8938b26a72c00f7f510f1ff956e73828fc06e9c335bce0c3426570dbf863e129121afa3397ad96f2c0e14677c3902bdbdadf76a6ed4f900a56d8219decc0e213"], 0x10}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x8, @mcast1, 0x10001}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x800}, @in6={0xa, 0x4e22, 0x2, @empty, 0x6}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x400, @local, 0x4}], 0x90) 01:03:29 executing program 1: lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x100, 0x0) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000240)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0xfffffffffffffffb) 01:03:29 executing program 4: openat(0xffffffffffffffff, &(0x7f00000000c0)='/', 0x70, 0x1) fchmod(0xffffffffffffffff, 0x0) 01:03:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) 01:03:29 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2000000000000130, 0x0, 0x20000000000000}, 0x10}}, 0x0) 01:03:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:29 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) 01:03:30 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x20000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x840) 01:03:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 329.983192] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor4'. [ 330.498909] IPVS: ftp: loaded support on port[0] = 21 [ 330.660720] chnl_net:caif_netlink_parms(): no params data found [ 330.725346] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.731998] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.740218] device bridge_slave_0 entered promiscuous mode [ 330.748148] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.754697] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.762544] device bridge_slave_1 entered promiscuous mode [ 330.784647] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 330.795254] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 330.816777] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 330.824697] team0: Port device team_slave_0 added [ 330.830444] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 330.838633] team0: Port device team_slave_1 added [ 330.844531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 330.852927] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 330.915321] device hsr_slave_0 entered promiscuous mode [ 330.952233] device hsr_slave_1 entered promiscuous mode [ 330.992759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 330.999994] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 331.020413] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.026921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.034094] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.040549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.130295] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 331.136471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.146920] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 331.157789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.166981] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.174223] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.183034] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 331.196592] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 331.202811] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.213740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.222075] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.228560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.240676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.248985] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.255516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.282512] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.300064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.308505] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.329872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.339596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.350645] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 331.359234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.367571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.376334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.397670] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 331.412480] 8021q: adding VLAN 0 to HW filter on device batadv0 01:03:31 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02070009020000000000000000000000c7648ed06571a07bc527501b0675da74d1565f95c770d77b30dd1f0add5f86801f098a2e70ff95bfe00b7cfe445ca34bfd5fadcdb53389cb9546d1f3ef6d40954c581f8834dde82d3192"], 0xffc6}}, 0x0) 01:03:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0x3}, 0x10}}, 0x805) 01:03:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x83a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 01:03:31 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x8) 01:03:31 executing program 5: clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x143) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_create(0x0) epoll_create(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000500)=0x3) 01:03:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:31 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000080)={0xc, 0x9}) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:31 executing program 4: listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 01:03:31 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x278, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xef}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc5b0}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fe0000000000000}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffff7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x11c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x924c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffe}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000800}, 0x8001) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009020000000000000000000000fef01ed57158e066d5224c803f38247947ecf7ce2168e9fa2849ecd691cfb74486229d05fce50bfb78beabd8cc31271ee855f738e8cb1954b82f1f9caa978a544fbc238546ae26d773cfdc581d8cbd89fd12c116ce7a9612ecc08a9699959c50532483909c8a4e6b777538c3e648dd137ddb2a475909ae8a6d66804e3c993fd1862d1e1c026436036ce05d7761d50e498dcbae0de68608af29cfbacedcc327533fc843908249bf6071d759ee996b04000000925a88705f2fcdbe56e2adfd3b203400000000000000000000000000"], 0x10}}, 0x0) 01:03:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x34, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000066fb5ba50000000010f9ffffff"], 0x0, 0x0, 0x0}) 01:03:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cpuset\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:03:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x400, 0x10000) mq_timedsend(r1, &(0x7f0000000080)="3a86caffc78348ed8d40cd301b243a039f628fae53435bc061a3c4ca603c86810e1f08af65a4b5ddd8ff2a23a70c61cc029b044f6ec9e87ea567b577940a", 0x3e, 0x8, &(0x7f00000000c0)={0x77359400}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="27eb5100000000001900000003000000000000000000000000000000"], 0x10}}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x6000, 0x0) [ 332.340971] binder: 13203:13206 transaction failed 29189/-22, size 46544506463453208--29796335616 line 2834 [ 332.419427] binder: undelivered TRANSACTION_ERROR: 29189 01:03:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:32 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00') sendfile(r0, r2, 0x0, 0x80000001) 01:03:32 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f00000001c0)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1400000000000000010000002500000000010000"], 0x14}, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) close(r0) 01:03:32 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="06005800defe884eca4dbd7e1e0bd1d44b1c04aefd908e31ee17dbef6107b7ae75570bff7a2648656d78fed8a836e549426132c178cfcf2e6320fbb5764273cf181f000000d61dc6f602e04fcbd1d4f300d805db000035c026ad254ff7aa43a788ed42eb684e5554c271b520b313da1b86efe08dcdeb3f3bd1006fe3c001594ba0fde9716fc677f4d2c5a171dac7baca7426c9155a2b3a563bcfcf1d216b91daa313cb05c97f09ce94a8897ac37fd88b9ed02917359af4ba6076a68c390ed2e36059890c1574897f826b751e50"], 0x60) 01:03:32 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x200000000000000, 0x25dfdbfd}, 0x10}}, 0x4000) 01:03:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:32 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x52}}, 0x0) [ 332.813494] raw_sendmsg: syz-executor4 forgot to set AF_INET. Fix it! 01:03:32 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x43) creat(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 01:03:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) 01:03:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 333.151682] hrtimer: interrupt took 202810 ns 01:03:33 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000280)="434e14093708657d981df5f7a862cab2", 0x10}], 0x1}, 0x9}], 0x1, 0x4) 01:03:33 executing program 0: prctl$PR_CAPBSET_DROP(0x18, 0x6) r0 = socket$key(0xf, 0x3, 0x2) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x400, @remote}}, 0xfffd, 0x9}, &(0x7f0000000440)=0xffffff61) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r2, 0x4) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000340)=0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4081, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/94) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e24, 0x9a, @empty, 0x1f}}}, 0x84) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070029020000000000000000000000"], 0x10}}, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0xaf02) 01:03:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e1"], 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:33 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000280)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r3 = socket(0x11, 0x24b586d58ace7534, 0x3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40860081}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa75}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 01:03:33 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = memfd_create(&(0x7f0000000280)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\xd5\x0e}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xeb\xc2\xb0\x03%f\xcc\xd0\xca\x04\xd8\x1f.f\xc1b\x97\xb7g\xea_Wh\x8b\xe2\x0e\xd4a\x15V\x1dj\x89R\xb7V5DEc\xd5L\xb6\x8a\'\\r\xbf\xd4*\xb8\xf9nS\xe4\xbe@\xf8\xb29vz@\n\x8d\xca{\xd2,=B\x15\x04\xab^\xa7x1\xe2\xc4\x01\xbd\xa0K\x05\xa7\xbb\xe8D\xdf\xf7\xd9\xe6\xddQC\x164\xdb\x19\x19\xfd\xa7[m\x04\x00\x00\x00\x00\x00\x00\x00\x16\xad\xf0\xba\x1a,\xed\xc3R\x88\xd4\xcdq\xaa\xc5\x88,\xe1\a\x00~\x9b\xf1\x8b\xac\r%\xdc\xbd\xd5\x87\xb8\xe8\xcf;lU\x14\xda\x02}\xbd\xea\f\x80f\xa94[\xbd\xd1\xe8|\x99\x8a7\xba\xc6\xc8R\xea\xb3atp\x81\xe2u\xae\xcf;\xd4\x01\x83\x9c\xb8\xbd\x05\xce\xbe\xdbH\xe8f\xb6\xde\'\x1b\xf6\a\xe4\x00\x1c\x04\xdc\x18\x9c\xf4', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\xe9\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00?\x00\rE\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0xfdffffff, 0x0, 0x0, @tick=0x4, {}, {}, @connect}], 0xffffff76) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="0200000000e133b88ee579bf3e40cf5655d9a7a990c82c963b9f1279dbbc57bd72a9b3d23e07b6b68883dc0000000000000000000000"], 0x10}}, 0x0) socketpair(0xc, 0x2, 0xc5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000280)=0x8) recvfrom$unix(r3, &(0x7f00000000c0)=""/27, 0x1b, 0x12002, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000001c0)=0x2, 0x4) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x4, 0x101800) 01:03:33 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000000000f, &(0x7f0000000200)=0x8000000000000b1, 0x2cc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) 01:03:33 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000000000e20000"], 0x10}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) 01:03:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e1"], 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000140)={0xaaaaaaaaaaaac78}) r2 = syz_open_procfs(r1, &(0x7f0000000080)='attr/fscreate\x00') ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000000c0)) arch_prctl$ARCH_SET_GS(0x1001, 0xcb25) 01:03:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e1"], 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:34 executing program 4: socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x5b}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/rt_cache\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 01:03:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000000000f, &(0x7f0000000200)=0x8000000000000b1, 0x2cc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) 01:03:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5c"], 0x1b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:34 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x5, 0x7, 0x2, 0x8, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd29, 0x3500}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0xb8}, @sadb_sa={0x2, 0x1, 0x4d6, 0x7, 0x0, 0xd6, 0x3, 0x20000000}]}, 0x40}}, 0x40000) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000000000009fd7"], 0x10}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockname$tipc(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000240)="33cb3c7113ae25ea6d25e6590f8839ee41c03f12d641a5006d3529ba53ea30f716a63e3308cfd901e393da2c966c2b56734043fb76de9ba43849c6f9aadbd480edc3cb7e9040ac1a14f96ebf78b8d3b53f2f3651b9ba7bfd9d78e6fa033d1248e843210fccbc903c5b69d0b5531b80cd7410571a8b8111038b2ba3e3e94326e4251ed2171304d636d11e59a25cbdc6643e2a72816f2f93d55c1f6c6228fd944a42a1d8207d0a9dcc480a0a7b877b6fe0081fcc57031574c7607b3806550db6", 0xbf, r1}, 0x68) 01:03:34 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x93) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x4a8, 0x0, 0x0, 0x140, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @rand_addr=0x5, 0x8}}}, {{@arp={@empty, @loopback, 0xffffff00, 0x0, @empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x0, 0xdf, 0x0, 0x3, 0x0, 0x10001, 'irlan0\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x0, 0x181}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="975f6c363a27", @mac=@dev={[], 0x20}, @loopback, @rand_addr=0x45, 0xf, 0xffffffff}}}, {{@arp={@loopback, @local, 0x0, 0xffffff00, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @mac, {[0xff, 0xff, 0xff, 0xff]}, 0x9, 0x80000000, 0x82, 0x100000001, 0x32, 0x1f, 'veth0_to_bond\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0xc}, @empty, @local, @local, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x5, 0x1) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:34 executing program 5: request_key(&(0x7f0000000180)='logon\x00', &(0x7f0000000700)={'syz'}, 0x0, 0xfffffffffffffffc) 01:03:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5c"], 0x1b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020700090200407d4cf31c498986ddf6c3f41e2da764158f18bfc3ea0573a4bf649c25202fb12bf52d87afe855d66cf8f97c9c0bec582823a79e35ad5bc33954d98c86d7becd40b0673d620a935125ef"], 0x10}}, 0x0) 01:03:35 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) truncate(&(0x7f0000000040)='./file0/bus\x00', 0x9) 01:03:35 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f0000000440)) statx(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x6100, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f00000001c0)='pagemap\x00') syz_open_dev$evdev(0x0, 0x0, 0x0) pipe(0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000400)=@known='com.apple.FinderInfo\x00') 01:03:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5c"], 0x1b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffe}, 0x10}}, 0x0) 01:03:35 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={0x0, {}, {}, {0x2, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='bridge_slave_1\x00'}) 01:03:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x82000, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000240)={"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"}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:35 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xff, 0x100) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'], 0x10}}, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) 01:03:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9"], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:35 executing program 4: 01:03:35 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x3ff, 0x8001, 0x40, 0x608, 0x81, 0xffffffff80000000, 0x4, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r1, 0x8000}, 0x8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009000000000000000000000000"], 0x10}}, 0x0) 01:03:36 executing program 4: 01:03:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9"], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:36 executing program 5: 01:03:36 executing program 4: 01:03:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000180)=0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x80001, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a01b5e15de83f4a965d4ac00093bca00000000000000000000"], 0x10}}, 0x0) 01:03:36 executing program 2: r0 = socket(0xb, 0x80006, 0x6) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x27}, @broadcast, 0x0, 0x2, [@broadcast, @dev={0xac, 0x14, 0x14, 0xf}]}, 0x18) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000140)=0xb) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:36 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100, 0x208102) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x4, 0xc3}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000240)={r2, 0x9, 0xeb, "d7a4e9765e0feb45157ab3bf1f2e401cbb8cfef1a942f1b43e1649f6ab3a207e3c7b783b21a4cfc7654174e7bade021246614ba7908f687e09123dfaecbe715674ea406f618ecc0a24f49ca23b58814987b735cb9b76229cdb44af03f317b38a84351f4c93b83d88156053c51549f7bbd1fcf74aeeaa5ea73a1e3e519c9375ceb2fa33faef09a8dc71918b40ac950957502f919cac815ea94ebe0aa66ba5e070e41916951bbff62d3716a37f37a316528f8111eeb649301e5f9c5fda8e1808921115c4818ef9fd2bf30d5ba965877eba4ba80c0227e19b46d910ce8c942f85dfc59df1d36595df0fae21cc"}, 0xf3) 01:03:36 executing program 4: 01:03:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9"], 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:36 executing program 5: 01:03:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="10f1bd4448331983"], 0x10}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080)) 01:03:36 executing program 4: 01:03:36 executing program 5: 01:03:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b"], 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x70bd2b}, 0xffffffffffffff76}}, 0x0) 01:03:37 executing program 4: 01:03:37 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x23bb, 0x4) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)=0x400) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, "09b17b59a1be974fd9e01f03169e05b8f9b5b619a98a945bb8f18eb83ec7f52275cd294b97623f694ccc1c0e1177237042ccbb5006e5f59cf8a130bf02a3c306eb7c7f23a467e976d672ffbb0b61f3c71161b06776579ab8d53e10428de2e2783233a307d0fe0d48cc9fced4cd00b44a7edde0bd2237a0434afb1683591d384819a81f2090e7389c6e03b41e246b436d5c88a2884e8221caacaef3d84db979e0a111800b39015ead63a46a45a9e6e1c66075d99bc2188ccd8410c7cae035f8c06d6dc28ee64667501cc4d9220bb47dcaff1a2fe810c60fc2c60aae891b566044ab80b0619506a367b3a182f22ac38e975d13246cb27dfbf4e7284dc5b19e20d437b65c95a6ef2af38848d2ded4a5102a0bdca6470a95357e57339ec6023aaef468cc8f5bc143b2e4c26e9bb61c6301bb254f2425906cac55fb722e58076244b2c62f8d04a01f50caa9df71bfcb3280c90e0f62eb32a79c81fbb30be903e71d806b2719ec2cbbe76b998752439ef023affd1281eb8b05aee70ace54fe03963de44da90cc1392cacc8fa5e59d7ac99a8e93c0c281c7ee4a165fbc590b91231393ce7875ffcf4463bd7f0b0af59892905beac6581d4241abef1249819ee4f0f0443a48fa6caf239644997a848cfdcec8215bb92ff7b9ca1c7b9fe52ba595ab0e538d3e086cadcb8278ce483057aeb1b0f0bcd29047207ed41b377fe73d49a3f1ee0c84c6a46b6c2d84eade456e73abbe5afc69d9e53c46f0b5ddacbe522bdc7b5e3dbd76ae5e4407c358bc372bbe857402a1f387cfe681c4a17bc90980bf1ccd236469da343315425ea16353b9a2ee9174f62c8cebf463d01965458fb1bc5b2908a7a896804a9caf776621bb72288099f17352240c376c116a05c2840910b9313987c265e184ecb6ffab327dd6575260680b108fa12a72fc8a5692b1e5b7b6f9f9466bc2fcc83685a78d7fb819c1b05f84a9d98efd6538efe111601f23d3b6ca138f1506c51d231638a91f36ce7ef045a8320844cc801937dae45ae2ca1ec14349bbddbb28f62d43e36bdb270dec59e1e42c17669d44dfe83d33bd75c523465fcb01d4e343e73669aa557e1441dbb7b067f55a1e72d5f428f5d5e75ae361c337c521c892b859a2cc02821b4edf0d63b92b4fe0bc07babf303433f3a4c8d12499becaad09911050c83fdb93f83c2cf7f632f496b0955c02c480c1363faec394fbd4f06bf5d74ae71308ade2636cfc0d6dd9b6621d0739adf484ea901e1b95d36fd07e4c47e010729a5d80ef8df5df40c4e39e8a14cef85fb206b6de280e4c8bad9ccaf3e0d9a31f7f97184dbebe98efc39ada3c9a762741fe9562be3e4858339866471b6841b913bf998986845912e5e1c9e4a733bf75780196d59e5f1707e2ce8a82c2c4686f4ad5b770d9f86d83b95fe71a8e6f73074043a39fc4e6c8310feda06c920725d1b89d67384eb31e57c3923a8159e2258583257be3d71d0932dbfbfaa0efb6bda66c38c2706a7448a229f4837e41b04c82661e5bf7adc0e48a1bc73669584d69d34d380e7c644b438a921546915af42a1fe46bffbfc2d131d02ed602c7bb4b1c018997bf6f0694b35a81efe83eca51221e4bace0b55c449f39776b9b872d106b4b41715d3121cbcca119e611d4060c3e61e51406269a704d029c64395d68be47d43aae537a0a87dafcde00a3c947dfe54d7328e4ec97ff6b09b1e86b4370cce512c6b964c71e3066c8e2251bb87b27afbdda8db56c0d9f9502541f799c5a98c89c2c67bcc95364b679784ac9ab1263fedb5bc53c4a32bfb0248da29652ed7b37a98cf7c12357dea88890849779eb9f6c6eb1a9aec7477286c521e7115f881eff58abbbce9b2a959bf978843df2f5bc36d6de372d1d63249309f573b061297ab679c6498a271ebbbd3e6c0fe34dcfe59249bb7a7bcbe2297e99da5d271b74aedb50799eb16dd404ace99096db6ce63e21002a7f7d96b9e9f676824711a0c182aad4ea5e2f0c043b51f2f292bb7c4334cb1a8b75a550d5faacf14ac8a0cedda72c8f2a24ffaa1ed6ad3508df58c00dfe1a5a98cb6f89b9b94b6fe8a2f10fbf2f2adc508bd6c74004eb68678b9edd5077f693174ba404d529c63a28b2a358005b481248281ea4fa036ed5d737adf3a12981184e331e8af151b132270515bd8bec170e5ae2ed89f8e1589ff8188cd2ed63a279a8225a8f619026dc10f6cba2e22d58801e5b23354b90856cb6ebdbc8834794775a42916cfa319d7ec80306f0c75e1b81bc85b7f705d0b84c69ec8e3ed09c71f6cd79e94f0de6ecbd2c1c6c8554e5b74ad712b2ba7f0081322c04ee710d9a345e75f572888aed4788e58b37cb23a3d48d48fcffd81b029c206b15b563611e0510e33645dccce8b57dba290c03b9bd08184299e2199c29753f06815a0bb2f7b710fb29d4b27b50a6dc1b0b97141b2a0f93e2483a762e6d03cd5fc0e1cb50e14d66793141231bef4e62d40312bbedbbc33804648cc5c0a1dae0203a86a9644ecd2d365e5eb92537060b4a009506b1e8fdbbc6a1bd2902cc4e8f32cace6d9d71298a373fcf857953eb0a78635bfdafc28669330cf968bfc85909013caf36da81db231dd3c730c4e0a2d98c207826515be3c0df171be4d1a0ab15c981ae1954c6297756e8cfeab6c60535ff003f7bba08360eee9e9d311db66f7d31b3865814b14478f475e9fa2d05c5b3194d6476900cf2e00a44909d2e26d6b00d137e3d776a7aa2c4660a630cae1c91941b86eede1797db6a6d6d64887a27217dad76cbe95bf6b382ce55d4431ab34f9c3dacdeba8e5830afbc97b8c7284a3762e6787d523c3a3a136feef46014d386146171a34dfbb627c4a84d455e6dd230f58f8f65e0b8d65ebda9b562b07da315a8d0f9544090ddf74235f87d8fc27c1eda92d0a304cc339687363b66d25e3c373233ca8d8cb84d8a160e071f8a64cc52960730bc7596559da4e701ce92860281cba494bf9212a4235b2c88b14433c67a113a14294fd2743203fd920d4682e2d21aef3f3a056bc4846a3472c8dc0f55fd5e8be31cdf5c81ee21492dfed1448280640d6678757d4162d427bb359ab2627c9ee505f7be34745d22abb19adecb959ec31404458b92ec37388c6d1033b4fa767e225a577b501e554543bc6b4b7527433dea22dbb1a096cdd64578c4d4c44cef547aaeaa68eeecde36124512960ea12fc2aaa19c1126c97327033809f70c354eabc9c4e2c1530ca95e0a750a2e13db9c59f1934912f8c128e89fc3519c35bcb9a702ecbc5c07a1c91126f863ce369e872a61b6ebcd145025eec1ac59c3d62b8c0813ff2b6eda2ec6cb5731130ec8c7a065a8c32e6848de69f231acd2706d6622bc425df8fe6f4fea71a9e5adf85a3f008aa640c6024d9e3ad3b116a4d99502159ce94cdcab3ef60bb429b9ec2cb719de60ba7982ef55b5c4eb2aa1ddc72a5d93cd1344410a50905f469b6880164d8bfe9d171b6743a20553643e80834b89d16f20613d690bb50a332ff87713e648fae976bd9e046fb15f0cf3e284ca21bae26906c432478cf6299b43b03fa5caaa77662cb8f13ea76bdef722c6bf63397ccebe4330d828f69bd99dd9316644a8139dd96a22a8930a592e6716cb7f0d7445455939d0cd8c9519ac53e73e74066c5f7548e753d1973aa4384185a8dfbf8c087e016d92ef0927f74e7385ddb60c6ea76c3fed79b74d1724f1e36f089c9f70d0f9cd2fe51eb3d73e978c13b7946d5013831ef3b5a69e89dc5682107a176560646919935b59459235d425610f17f8f305cc34496766d984f8b91c19cb493450f919afe5a166ff1944e36aabfcf93463c9ac194851d2e653ae83eb7bcf5cacb3dcc79d28b1306b39b7d40940f64bc7062e5bfc5e6f9b32d4d039646792c143233c36496569ca6d50f19f804611d1561ea44b56667d3cb7b4de690db2fee5da583d17165b32a0af732bb8f192d4519e3edf0b81c2478653bbd2c3022a4651a9f9a28a1bfbb47a23e328ae63bac336ba729b9873336cac7f2d3bd78299500358dab93ec9c385fe4a8627826e63cacb65ce3d3830ac1f2f003ff16a6576cdd7bd18a3f60809b26c889023ce5ffde402baa35c7d53ceb32e21aca857802bd71920930ccd3a21d071f2a63b9577b908dde5ac0eeb937b5a471669f26bc2e71d58ebdf2e91c4484882d5a3b3bf84634ade47fd28998f58a8cfcf37f7aee59c58df69a1d9fc685b965ad1459388f595616d4506f2dd4243698742a8d7e2b7ca67ab155c1843e8e5ab3c4661daebfd9e117eee0a3d1aa703eeecb9b316b68aaaf7efa8806c480879babe3718452daf991b7efc17e43bb42d76a9f451787f1d2013679d18104e2bf2ffb09218c615e30a916a37e2f49c00c989b8e9e5422592564f9d58756504af4765a4397556c72b32d905ddf3422f6b82b4c4a5a6551ea535233e04d29ceb7b717438259c098f43a6ed028fc0a67d502ab25566d1be9ad51b6ce1870fe8a5b7249c3fb33b58fc4ebeafdd75700845a48df377aca6ee7d2b1088b869fe2a0059266a637f0da865e1909d29c7934b6e8f4e0f8599faa5a72e8d0fda4f28f6f5b964676ca70ddf73b2ad30b62f8d34e8f02e0234d4ad9c25a97fbcc6ddb9601c709d9cbf19788cfd53b6e260ae2b285c8d504c74c13f2ae6f5b8e755dfd723dcf0486addf5fea6716287942c53623c85805a4c9111e59c30a97ef5c832d8ef8154656dd1e3bc2571c0136bea7dbb740c9c8b8e328562522a7d75dbe48d74294df16a93f719eb84d27ba427a5ac0cc0cb6b1c742d5907de547a1a28b36e1b0a688aae336437c15f46a18996b17cd3ee1ebdc307d7f4086f1ba989f8970c224ac27914a4e6388f8022559842276422a86bd913d10b6cef12db959ec1f8a83ebed2093a8c4dfdd4295cd0e5dbfe86a7366aac78556a9360781decaf784a326b89436831aa9825cdb8f595029fba8daba64ac47c9299194f655faf89b661592c5a7f0ad09ff4db104303dea25da272dc950397cae4b3190be44fd4611fce3fccbceca4d5d3222874eeaf4a40973f530870a32599083a15edad8c1dbb570dde2d6e94e116a51dd6b57e91c60adc4acf35b621c4cdfca07abbaeed4c37be8146960f6ce237c7d494505e5fc89ef4b9eeba8ec041e0475daa20a20f7d6393c0361844c93525dabb359e358dfd959914db4246ce85f14827b5a0407c76c4e123c98d221a11ad8399f0ba1e42164af43079f0be5b8bf2cd9ecb8ab52278a5259aacc92747a34eb81a70c3a63e1e7ea49febfa6e1a54cdff31f442e2de81f413e0d11382b1ec20a08b06acffcbb4c9a1f81ae8e8e97e2a871169e4589e0101f416ca76415d7f50bc45c4624ba41e4f673be151720f0d0e484c9bc98d6e24676ab7909cdcfe29f23e53c0b161c5e0718ad7618b2b4c3ab45b7d1cce1c0d3c4a2ae66849fe2a078d05bf47e56150294e71868b03065ec2e34b89cb72eb180172d1a9f43f4226cf617d0628f7b8f2942e985cac6ee28cbd3ebc8903cf474418aff4d49102977f18bcce4d4c50a20487119ff732629dc52381b6fc90c1deeefce35dcbfdbac3ab33f3c33bd3eb22008fe2bf5eef4d99cea5afd0190c42e49bc7e22f71a4a33ebfc62ff9e77a405d30d6a04ad1976d949264276c01225f182058372202aaf652e8c8982237035399945818b580b4cf324084e408a48365b8a955ad60be2a65ab51fe2300cf90ea06be365329583962e21a61405c2934e74dd142d0481f6a90338b39995c3610c5166e440055e16ed70789668f5cc1c", 0x1000}, 0x1006) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) close(r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="020700090200000d000005000028e02a3fe668a1b6f8dcb1b5457e1eb6a8549be23c7c5ed877548d01c0736fbbe9749d02ca37c6a8700a3dccb33b96035dd827d574786c1d02c781ae1b57bcd0e3041f6ab9d5b98719c9b1104899af25711e3102c4ea0b2d6db622821900dce42ae7a823c056aeb258e40f78d79e28c382946203d674deba25d7b715da3c3df66d49e9c521a79d0b3d640d12d5a04955b07c73d9cf30c70e9e604c5b7c2a5f2c82d8f1cbaf356d446e1c76a4f660d6bce347d443cd631d71591a61349439b15d974bccbccb0aff4ee7069ed7c5af60de7174b59a6db590aa4faea24d78225889dae56f3e2b6ecb744687a3e85b76df10eae5e61c77f0d4e57a51"], 0x10}}, 0x0) 01:03:37 executing program 5: 01:03:37 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b"], 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:37 executing program 4: 01:03:37 executing program 5: 01:03:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="bba870f0a5bfc0c3e6f1d0f21d8cbbd8a78fb66f5f6f827bf2c71314b3dab78a5742c0d4501b5c0627b835d653ee8f066bfe2a8e75739d44a35b9478bfab97b4cdf6a6b641b871980b857453ef01828904b1fa92949519f73547052d37d7d644694c37a4aa0d6b0ca28ecafdf5106359de3e22e8099102c5692a2707bf0d7974ad0f14533d08670485e29ecb3275920f54ca2a0f8f5eb3588646"], 0x10}}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x30000000000, 0x10001, 0x2}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x500, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000001c0)={0x9, &(0x7f0000000180)=[{0x8001, 0x2fb}, {0x8, 0x401}, {0x606b, 0x5}, {0x800, 0x10001}, {0xf9, 0x9}, {0xfff, 0xffff}, {0x7, 0x9}, {0x6, 0x3}, {0x5, 0xbd}]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000100)=0xffffffff) 01:03:37 executing program 4: 01:03:37 executing program 5: 01:03:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b"], 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:37 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0xaf14}, 0x8) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) 01:03:37 executing program 4: 01:03:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) 01:03:38 executing program 5: 01:03:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b"], 0x23) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x10}}, 0x0) 01:03:38 executing program 4: 01:03:38 executing program 5: 01:03:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b"], 0x23) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:38 executing program 4: 01:03:38 executing program 5: 01:03:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmsg(r0, &(0x7f0000001980)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x1, @remote, 'vcan0\x00'}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)="6643d9a57522ef837bbb86d279ec9d6bd32b9aad3a19781e127666cbaaad351d760666f9491c2e27c1a3bb11246fffc5a9882f7d6c35efa4ba40602d14049225e768e6a50d19fc030dd5221fe100d89094cb72c875fe21a2d9c2bf7bb4a00763eddb5d66ea7615835eb5917d87b649b39b1f7c55bfa743", 0x77}, {&(0x7f00000000c0)="90315fb800333396ab89241a43952a573155d1a9108349", 0x17}, {&(0x7f0000000240)="6fd3fbe803d3a4942c2d1b316729edbc216f4672116377f52a1e1324682f4334fede2380471b2ef38256f3efb64f7b52a300f79e902b0a3cb6382fea2b068ec309243bbd0fa2395ca6ac83dd200590d0019ec66859276ea002785239cabf7a5e5a52d48b5430d1a01f99760a729bbbaa9ef01a0d678e808d50b3e0e9ee6cd180b069a65f610a11daa7d23132513ccc51a516ca2e6491941c74ff491859f2643f709daa2fe8341277fb990c028fe04fd7ed7672bc57f6d7638aec2b689a5fd504a7d59aab1f6591f302e61f42496985fae13faf31ea7370e4edd2d20927d8e78bd4", 0xe1}, {&(0x7f0000000340)="9c5f9276c96c0b370243bcceb35dfdc82f74ebcd5b466123f48a445de20929bc6cc97ff4d86c0c1459bdba3107478b10c240119a017517e10a3759b4cbc0d092ce8d8dd721adf704ef1865b0796dfa9a253e7c04b0669dc83283b299c4fc1a58d22564bc994e83fca6f6108d12f12ad995d452993a172039788eba217a504c69b5d24ac62adc5dc277f62d45d3a0d97774afa7b1b10a7f", 0x97}, {&(0x7f0000000400)="8c908f194178cf86f0a235eebf1d4efb7ea621f9be57dcd5bd6e895e5159a2dab3c522743605ab6ebf8501c4f3cfacd78085727a9f7897f63726961e7d141fba9a17905c4f9fbc46e5c0ee626392ab73054a2697591666a5380ae0a051f36ee417bf135a5dc2a7513e1a9123f0480f8ed130a802c75a3b5870b7e5c932b5bf31c02903a301b8098fa100d2ed6c488bda2f5276de0d36918fe961f4b0fca0dfcb85302f28e965d381bbc53b09d904bc689e442be0432e485f0b158d6a6092236b6d2458bc2b08b2b56fdbbdb099d15ede0dd7b3089245af037a3565aad1ccd81dd880610dd92dad3969", 0xe9}, {&(0x7f0000000500)="498862654adc90c0c35ecc2dc774e43d00c6f2bb2b2c23f6212193a2a32907a5f936ada23c2f9086b7d2a4dac2a6da64d8ea24dcbf88ca5cb7cdf91531631a0c3c725e33aab463e9dc902c190fc1fd54fdbe8f2635da", 0x56}, {&(0x7f00000001c0)="f4a9689757", 0x5}, {&(0x7f0000000580)="efafda643807ab6ab72d3cd33674ce4c52fe7df4b6b3cdf7bb20787fdfdd11d3a22f3b35bcd6dd88", 0x28}, {&(0x7f00000005c0)="6db219da3c4a3a74ce42ce5232b08f4ecf6c50f2ccc1950e09ae9f765f59aee1f32cedfe5607a860dfd728118a2c9c2282eb4714f3460a65c6676fde", 0x3c}, {&(0x7f0000000600)="4366a9980d1201dca4f372e4c477df8ddad5d58299a162d5e03a218155855a7c9d83ca211fd38e5ba33befe1dcc4fe0f2ff752a272bf2a89924edfc7ed1d9c6ebed46bf4dd3754bfbc1a159c615391ec5a04e921db41f0de576ca49a1e90475f0fa7538fa56d2cb95f3b002baadf8af708965cf45d607ee1356ad179f5354da24caf6c7b3b45b40019542505b052916276e0399e5a1674b5bd6b087bb1be79a3501949613f6b4fd93b6af4524924393d1ddf092433ec9a4e7c2416b07224d391dde6093e2f6a767de20057310ce2343013c16e760daae821", 0xd8}], 0xa, &(0x7f00000007c0)=[{0x1010, 0x119, 0x3, "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"}, {0xf0, 0x0, 0x81, "e7e29e08a62181902fac9f14b850e479a03f988b7d46d311d926f7eadeb77d1444e3a31d957255df559ed28f9b5869ef08c1ad196a340795cea7e7a57790bd22357bee51025e576c9623c7a875ade409f2828e6a430c5a420a767515b870e6e8f7ccd13aa5082c4c8da7fed089b40a6390c32bb93a7998706959fa3b9a2c66e4add8076a23c763d399f3774db77873e29657e66fffcaf3c471ecdaa9c44c80b8329435245370009fa90ff64b89277405c595185c151fb337c5c3242de14e63005b8485f1a18c19af14a821c673395b9706e38058c9c3d39161"}, {0x60, 0x10e, 0xfffffffffffffc00, "446562d2283a972a7a2c553e0c46513226d724d1340b98ad70abda92264af0188f68313c55db48fe90ccd7fc6daffb581b558d6ae77a916a4c87dc822a5d888a64862d7a0f42ea1c6fe53a1f9634e6ce"}, {0x30, 0x88, 0x9, "8a817edf8a1e7617e4d4677b181f0940e073d9d89f940590c8bc54e51afee2"}, {0x10, 0xff, 0x401}], 0x11a0}, 0x10) r1 = syz_open_dev$vbi(&(0x7f00000029c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000002a00)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = semget(0x3, 0x0, 0x8) semctl$GETZCNT(r2, 0x3, 0xf, &(0x7f00000019c0)=""/4096) 01:03:39 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x2) accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@loopback, 0x2, r1}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000240)={{0xffffffffffffffff, 0x3, 0x45b102a3, 0x3, 0x5}, 0x0, 0x4}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@mcast1, 0x21, r1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x0, 0x10001, 0x6, 0x1, 0x5, 0x3}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ef07c4ff195300090200000a00000000000000005940e23eb34469ce99665ab1561f6fb745b6ef7e538156"], 0x10}}, 0x0) 01:03:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b"], 0x23) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:39 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x200c6d, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000080)="17f04cfa1ca7a33fdd53b396107c1a91655aa2d86ee2442cd7fb36f40076b74861d4b7600b93c7ac5cdc1df9ddea3da6156404ef6031fc5a5558fc5496", &(0x7f00000000c0)=""/21}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x6, 0x2, 0x0, 0x3}, 0x10}}, 0x40) 01:03:39 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 01:03:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xb) r1 = socket$inet6(0xa, 0x802, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000980)="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", 0x1000, 0x40, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0, 0x0, 0x8, 0x0, 0x2}]) 01:03:39 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {}, 0xfffffffffffffffd}, 0x45c) clone(0x1100000000001fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000880)={{}, 'syz1\x00'}) 01:03:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:39 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000000000000000"], 0x10}}, 0x0) [ 339.513853] input input5: cannot allocate more than FF_MAX_EFFECTS effects 01:03:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000200)=0x7b36, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, 0x0, 0x0) 01:03:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 339.591284] input input7: cannot allocate more than FF_MAX_EFFECTS effects 01:03:39 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4102, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}, 0x2c) 01:03:39 executing program 1: r0 = semget(0x1, 0x4, 0x400) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r0, &(0x7f00000000c0)=[{0x1, 0x7, 0x1800}, {0x1, 0x0, 0x800}, {0x1, 0x3, 0x1800}, {0x3, 0x101, 0x800}, {0x4, 0x7, 0x1800}, {0x1, 0x6, 0x800}, {0x4, 0xd645}, {0x1, 0x3ff, 0x800}], 0x8, &(0x7f0000000180)={r1, r2+30000000}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207800902262ac1f2963cd6610076fc"], 0x10}}, 0x0) r4 = getuid() getgroups(0x2, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff]) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) semtimedop(r0, &(0x7f00000003c0)=[{0x4, 0x6063, 0x1800}, {0x3}, {0x0, 0x80, 0x800}], 0x3, &(0x7f0000000440)={r6, r7+30000000}) r8 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x100000001, 0x7, 0x9, 0x0, 0x2, 0xc0504, 0x9, 0x5, 0x9, 0x7, 0xff, 0x0, 0x4, 0x5, 0x100000001, 0x7e7, 0x1000, 0xf04, 0x7, 0x3, 0x4, 0x8, 0x3, 0xfffffffffffffffe, 0x3f, 0x1000, 0x0, 0xea, 0x0, 0xfffffffffffffffb, 0x7f, 0x9, 0x8, 0x62, 0x7, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x28508, 0xc0000, 0x1, 0x6, 0x1f, 0x0, 0x1f}, 0xffffffffffffffff, 0x8, 0xffffffffffffff9c, 0x2) r9 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x5, 0x1ffffc) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r9, 0x54a3) ppoll(&(0x7f00000002c0)=[{r8, 0x10}, {r3, 0x100}], 0x2, &(0x7f0000000300)={0x0, 0x1c9c380}, &(0x7f0000000340)={0xe8}, 0x8) chown(&(0x7f0000000040)='./file0\x00', r4, r5) 01:03:40 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000200)=0x7b36, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, 0x0, 0x0) 01:03:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:40 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101000, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x278, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xef}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc5b0}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fe0000000000000}]}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffff7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x11c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x924c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffffe}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000800}, 0x8001) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009020000000000000000000000fef01ed57158e066d5224c803f38247947ecf7ce2168e9fa2849ecd691cfb74486229d05fce50bfb78beabd8cc31271ee855f738e8cb1954b82f1f9caa978a544fbc238546ae26d773cfdc581d8cbd89fd12c116ce7a9612ecc08a9699959c50532483909c8a4e6b777538c3e648dd137ddb2a475909ae8a6d66804e3c993fd1862d1e1c026436036ce05d7761d50e498dcbae0de68608af29cfbacedcc327533fc843908249bf6071d759ee996b04000000925a88705f2fcdbe56e2adfd3b203400000000000000000000000000"], 0x10}}, 0x0) 01:03:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200000, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x2, 0x0, @raw_data=[0x81, 0x4, 0x81bf, 0x400, 0x8, 0x1000, 0x1ca, 0xff, 0x3, 0x1800000000000000, 0x6, 0x0, 0x3, 0x58a, 0x7ff, 0xec74]}) r1 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000240)) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000002511d0d700"], 0x10}}, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000140)={0x2000000000000000, 0x6000, 0x7fdf, 0x4, 0x1e}) 01:03:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x422000) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 01:03:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) 01:03:40 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000080)={0xe, 0x7, 0x4, 0xffff, 0x4d, "bb10f706645fcc1fc475144549f9c385f46b36292cb94d99feb540a9640deb79387c21dd4fad3997193e8af53848559dda1967888cbeefe7471e0914154ddc40b10c6ab69011ed6e00724c42aa"}, 0x59) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:40 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x1, 0x80000000000002) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf8, 0x2e, 0x100, 0x70bd29, 0x25dfdbfe, {0x1}, [@generic="2f355a5396e83989f0e860466c029feb34d91d394d9ebeb6a3f6eb8fb71b5abc6b48100c37a9c6de9be753199968161514fbfa94ad403cd44da06732732f80e97c42da5b3ad57e99543d6845080a45cfd881b877bea6aa3ae65fe67dc2e94129811d7ec4a1341f1bfbe7d9c51bad29218b263d3a89fc3c4db34c52c6b28b47a8eb8655ecd76d4e0a60f3f85898786f4bbd99f1856a9eeddcb0e6f895ed339ec2edff127d41aee186bf6ffeac33ad0a579fd90826d4a02b7d448a7af5d87d4f77fa53238b18fbfe45a6db17bfb21367c4dd0a935954f1fa2ab67a033cb09f446956dedb"]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x100000000032, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x7, 0x10000, 0x7, 0xc5f}, 0x8) 01:03:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) 01:03:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:41 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x103000, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x2, r1, &(0x7f00000000c0)='./file0\x00') unshare(0x400) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r2, 0x40044102, &(0x7f0000000100)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207000000003e1e"], 0x10}}, 0x0) 01:03:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0xa, 0xff) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x3ff, 0x1) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) fcntl$getflags(r1, 0x40a) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000740)=""/31, 0xfffffe95}, {&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000cc0)=""/235, 0xfffffffffffffd2a}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f00000006c0)=""/103, 0x13a}], 0x10000265, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000480)="d77f3fd351116a0282a261542f5e84856aad4bc34c0f3c111e07f89ea145f4fe3aebb9167a22dd3b63c8438395a97774fc09c11a3ae76f1958a8899ca5234bcf7e9e7e0fec1aa8bf5ffc146bb9e5c21914f456424bcf33b3bf6e9c18d2955efbb748ea8f24a6d053737f2a9fb20d30d7803c57458cde4e486785db264f2be74d3fc412a7217dc978fec41e109579bbf00129bfcd59b499db5ebdf6a223491a010b43ab1e762c8720aa85c88f79c4467499c982f8e58e791cdd793937087341384f6e997bae66482176c4426b535f7426f85d23c680deb8846f391f30c7aea017ea9b05284e7c3a9dac8cba143714d279b37808", 0xf3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x7fff, 0xbd, 0xffffffff, 0x81, 0x2, 0x4}, 0x80}, 0xa) syz_open_dev$dmmidi(&(0x7f0000000680)='/dev/dmmidi#\x00', 0xffffffff, 0x8000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x428420}, 0xc, &(0x7f0000000600)={&(0x7f00000009c0)={0x2f8, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x800, @mcast1, 0x40}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x33e}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa192}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xedc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffeffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d920000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf494}]}]}, @TIPC_NLA_BEARER={0xec, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf5b4}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3f4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x673d, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x431}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7fff, @remote, 0xffffffffffff7fff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 01:03:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept(r0, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x60000000080ffff, [0x25c, 0x0, 0x1d9], [0xc2]}) 01:03:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x2000) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2021}, 0x10}}, 0x10) 01:03:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:41 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000040)=0xe8) sendmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000080)=@xdp={0x2c, 0x0, r1, 0x21}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="fc5372c6e53f1a5f2ab5bc633a69627f110f5883f3213633683c1d24483f64c5cbac1e930ec7527b23420d68a6441a5bbcf71b5c8695a64a15edbbf3eccf12170a4819f56efed0b9a2be403afcbaf5c66b05ad7f26be9b14d94bdbafe26cf788204834a428842bfa9eb0904ccba5ddbab370dee75828b94e2807012307ea4feea0fd8e200c740d493e379aebe578ad9e6ba123bdfea7295c0b00f2c3912053872df1e8e2f7cdb0c5d8875708de2cb831f7fff4f20db00da07f4930159b0b88d7a25587f37abfbeb930", 0xc9}, {&(0x7f0000000140)="46c2c7904df90276948af183ef1cee27cd7672", 0x13}, {&(0x7f0000000180)="c267428b74e2d68132ea8cb14c08f294dd76d2e3cc9130f8bfa80ac6c8828ff8dab69ac361da18ffa7e0e65387db6148b061fc94d19d991c972957020e353fe87d035e79b38b", 0x46}, {&(0x7f0000000440)="6bd96eb4d3090630a3672b8fe1151b92ec1c9e3dc0e63a2dbdc83a5cf1ad99e6c5ecd3e109869092d24e8e5aab7627c8cfef3c87ffb1116753aa8d724b8e00fd6e2245109fe5be528cb9ef31864539013fcf8c4d0dc934414ad4b440c78c9bf4b9930ad37943714b525afc19a0a7e0961e5acf709463c38877905ae47535234bc655866c5cbf5887fff7544bd6ba273db235641bac304b0d7263945215eb12e0c660fad365cdc290ef12ca39e75d28b737196cb8e9ba32c772259234789b9377311a3be4b1f1070a0be2d3ed2f24a8c2094a9756c7d0c98280", 0xd9}, {&(0x7f0000000540)="a457bc279990c1a9e418617e2532dde0ae05611966feed0c53267d01332ec3f7ab394f7c07be962c1aa3a2ef312ee7fa4f413e410b9a646f86776fdc4b4e6c28c30a8d511ee4ac82891ec0ca0c13043e5d62fe72ae55949ddd5cf956771168ee8561338a033851bc980f0a955a74e0c1da88ab2545ad870adc4c045261540c6a54c853a1a883eae70904e490c7df7aff56b4478ee088a521ddc25d66b9512bb6bc5ee81a93d85096dc991143ae352b6ebec010d32d334d0e8da5f4fcaf83224fea874b7309", 0xc5}], 0x5}, 0x3}], 0x1, 0x4000040) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x10200) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000080)=0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x7, 0x8, 0x9, 0x2}, 0xfe7e}}, 0x0) 01:03:42 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000140)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)={0x77359400}) r2 = eventfd(0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000000180)={0x7fff, &(0x7f0000000680)="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"}) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)}]) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1, r2}]) 01:03:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:42 executing program 0: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x3ff) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000240)=""/234) 01:03:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) 01:03:42 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x51e0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x1}, &(0x7f0000000180)=0x8) r2 = socket$key(0xf, 0x3, 0x2) accept$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:42 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000001c0)="bc8eff5ad3ed57bc4582459aa4fb8c2d8f212f9f") sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x4, 0xb2, 0xf, 0x222, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_key={0x5, 0x9, 0xd8, 0x0, "bff8c6f204ccf0c08b8b9bf11788bd6709469a547885a292ff36dd"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb3, 0xfffffffffffffff9, {0x6, 0x33, 0x8001, 0x4ab, 0x0, 0x1c65d580, 0x0, @in=@multicast1, @in6=@local}}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}, @sadb_lifetime={0x4, 0x2, 0x80000000, 0x3, 0x2, 0x9}, @sadb_ident={0x2, 0xa, 0x1000, 0x0, 0x10000}, @sadb_x_sa2={0x2, 0x13, 0x9d, 0x0, 0x0, 0x70bd2c, 0x3501}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd2d, 0x3501}, @sadb_x_sec_ctx={0x3, 0x18, 0x8000, 0x6, 0xf, "084e7051e2bf2493fb1f3ebf87fe18"}]}, 0x1110}}, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f00000000c0)={0x5, 0xfffffffffffffe01, 0x9ef2, 0x6, 0xff}) 01:03:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x3, 0x9, 0xd8}}, 0x28) socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000907031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 01:03:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 342.845021] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. 01:03:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x18000}) [ 342.966250] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. 01:03:43 executing program 4: ioperm(0x1, 0x101, 0x3) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) 01:03:43 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) 01:03:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) 01:03:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00@'], 0x10}}, 0x0) 01:03:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 343.325539] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (18446744073709551615) [ 343.335711] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 01:03:43 executing program 1: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:43 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, &(0x7f0000000400)=[@cswp={0x58, 0x114, 0x7, {{0x5b0, 0x401}, &(0x7f0000000180)=0x8b5a, &(0x7f00000001c0)=0x7, 0xfffffffffffffff9, 0x5, 0xd83e, 0x400, 0x41, 0x3}}, @rdma_dest={0x18, 0x114, 0x2, {0x10001}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/208, 0xd0}, &(0x7f0000000200), 0x21}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0xe84}, &(0x7f0000000240)=0x9, &(0x7f00000003c0)=0x10001, 0x3, 0xf8b, 0x0, 0x9, 0x2, 0xaae0000000000000}}], 0xf8, 0x10}, 0x40800) pipe2(&(0x7f0000000540), 0x84000) r1 = syz_open_dev$usb(&(0x7f0000000580)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x200) perf_event_open(0x0, 0x0, 0x0, r1, 0xf) ioctl$TIOCSETD(r0, 0x80045438, &(0x7f0000000080)) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x10) fcntl$setsig(r2, 0xa, 0xa) 01:03:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:43 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) 01:03:43 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000180)=0x0) write$FUSE_LK(r0, &(0x7f0000000240)={0x28, 0x0, 0x7, {{0x5, 0xffffffff, 0x2, r1}}}, 0x28) r2 = socket$key(0xf, 0x3, 0x2) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x4, 0x1) set_tid_address(&(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={r3, r4+30000000}, &(0x7f0000000140)) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x3a4}}, 0x0) 01:03:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYPTR64, @ANYRESOCT], 0x21) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xaca00, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080), 0x4) recvmmsg(r1, &(0x7f00000039c0)=[{{&(0x7f0000000180)=@ethernet, 0x80, 0x0}}, {{&(0x7f0000002800)=@ipx, 0x80, &(0x7f0000003880)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1, &(0x7f00000038c0)=""/194, 0xc2}}], 0x2, 0x0, 0x0) 01:03:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYPTR64, @ANYRESOCT], 0x21) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xaca00, 0x0) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080), 0x4) recvmmsg(r1, &(0x7f00000039c0)=[{{&(0x7f0000000180)=@ethernet, 0x80, 0x0}}, {{&(0x7f0000002800)=@ipx, 0x80, &(0x7f0000003880)=[{&(0x7f0000002880)=""/4096, 0x1000}], 0x1, &(0x7f00000038c0)=""/194, 0xc2}}], 0x2, 0x0, 0x0) 01:03:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d6, 0x6, 0x0, 0x67, 0x3, 0x20000000}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1b, 0x4, 0x4}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}]}, 0x50}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x48000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000240)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@bridge_getneigh={0x54, 0x1e, 0x802, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x1, 0x100}, [@IFLA_TXQLEN={0x8, 0xd, 0x100}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_PHYS_SWITCH_ID={0x18, 0x24, "c28a266a8a1501e78a1543b927cd6bc033c7"}, @IFLA_IFALIASn={0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x400}]}, 0x54}}, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000400)={0x6, 0x9, "df0edfa484e1ad21d2f9eb36076a32030dcccbad8ebf0f4e77fc0ed00a713546", 0x6, 0xfffffffffffffe01, 0x6, 0x1, 0x4}) ioctl$int_out(r1, 0x5460, &(0x7f00000003c0)) 01:03:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4808c2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4, 0x1ff, 0x80}}, 0x28) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02f5ff0802000000000000000075"], 0x10}}, 0x0) 01:03:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_settings={0x0, 0x2, @cisco=&(0x7f0000000000)={0x7f, 0x8}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x7, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x20) recvmsg(0xffffffffffffffff, 0x0, 0x10020) read(0xffffffffffffffff, &(0x7f0000000740)=""/183, 0xb7) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x1) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000280), &(0x7f0000000100), &(0x7f0000000380)) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) getsockname$inet(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x17ba400}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x800}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={r2, 0x9, 0x7fffffff, 0xfffffffffffff001, 0x100000000, 0x3, 0x10000, 0xfffffffffffffff7, {r3, @in6={{0xa, 0x4e24, 0x1000, @mcast2, 0x1209306c}}, 0x1f, 0x1ff, 0x1, 0x1, 0x426b}}, &(0x7f0000000300)=0xb0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000540)=""/208, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\r)\x11\x01\xf5\x05\x00', @ifru_names='bond_slave_1\x00'}) 01:03:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x10}}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x900}) 01:03:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000001c0)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = geteuid() getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000140)) chown(&(0x7f0000000040)='./file0\x00', r2, r3) [ 344.946118] bond0: Error: Device is in use and cannot be enslaved [ 345.077417] bond0: Error: Device is in use and cannot be enslaved 01:03:45 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x200) ioctl$KDDELIO(r1, 0x4b35, 0x1) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380), 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 01:03:45 executing program 4: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bae3e, &(0x7f0000000180)=[{}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000000000)=""/174) 01:03:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380), 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000), 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, [0x800, 0x7fff, 0x9, 0x4]}) r2 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@loopback, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001b80)={@multicast2, @loopback, 0x0}, &(0x7f0000001bc0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001c00)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002540)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000002640)=0xe8) getpeername$packet(r1, &(0x7f0000002680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000026c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002700)={'eql\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002740)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000002840)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002880)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000002980)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000029c0)={@loopback, 0x0}, &(0x7f0000002a00)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002a40)={0x0, @rand_addr, @broadcast}, &(0x7f0000002a80)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002c80)={{{@in=@multicast2, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@broadcast}}, &(0x7f0000002d80)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002fc0)={0x0, @broadcast, @initdev}, &(0x7f0000003000)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003040)={'syz_tun\x00', 0x0}) recvmmsg(r1, &(0x7f0000008140)=[{{&(0x7f00000032c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003340)=""/10, 0xa}, {&(0x7f0000003380)=""/94, 0x5e}, {&(0x7f0000003400)=""/194, 0xc2}], 0x3, &(0x7f0000003540)=""/173, 0xad}, 0x7}, {{&(0x7f0000003600)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003680)=""/159, 0x9f}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/6, 0x6}, {&(0x7f0000003880)=""/102, 0x66}, {&(0x7f0000003900)=""/98, 0x62}, {&(0x7f0000003980)=""/237, 0xed}, {&(0x7f0000003a80)=""/86, 0x56}, {&(0x7f0000003b00)=""/175, 0xaf}, {&(0x7f0000003bc0)=""/36, 0x24}, {&(0x7f0000003c00)=""/103, 0x67}], 0xa}, 0x9}, {{&(0x7f0000003d40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003dc0)=""/7, 0x7}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/45, 0x2d}, {&(0x7f0000004e40)=""/17, 0x11}, {&(0x7f0000004e80)=""/213, 0xd5}, {&(0x7f0000004f80)=""/104, 0x68}, {&(0x7f0000005000)=""/158, 0x9e}], 0x7, &(0x7f0000005140)=""/188, 0xbc}, 0x7fffffff}, {{&(0x7f0000005200)=@ax25={{0x3, @default}, [@remote, @null, @bcast, @netrom, @remote, @rose, @remote, @netrom]}, 0x80, &(0x7f0000006540)=[{&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/5, 0x5}, {&(0x7f00000062c0)=""/53, 0x35}, {&(0x7f0000006300)=""/150, 0x96}, {&(0x7f00000063c0)=""/247, 0xf7}, {&(0x7f00000064c0)=""/115, 0x73}], 0x6, &(0x7f00000065c0)=""/254, 0xfe}, 0x3f}, {{&(0x7f00000066c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000006940)=[{&(0x7f0000006740)=""/104, 0x68}, {&(0x7f00000067c0)=""/55, 0x37}, {&(0x7f0000006800)=""/69, 0x45}, {&(0x7f0000006880)=""/2, 0x2}, {&(0x7f00000068c0)=""/103, 0x67}], 0x5, &(0x7f00000069c0)=""/97, 0x61}, 0x923}, {{&(0x7f0000006a40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000006ac0), 0x0, &(0x7f0000006b00)=""/72, 0x48}, 0x3}, {{&(0x7f0000006b80)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000006c00)=""/244, 0xf4}, {&(0x7f0000006d00)=""/226, 0xe2}, {&(0x7f0000006e00)=""/217, 0xd9}, {&(0x7f0000006f00)=""/139, 0x8b}], 0x4, &(0x7f0000007000)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000008000)=@alg, 0x80, &(0x7f0000008080), 0x0, &(0x7f00000080c0)=""/115, 0x73}, 0x8}], 0x8, 0x10042, &(0x7f0000008340)={0x77359400}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000008380)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000008480)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000084c0)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f00000085c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000086c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f00000087c0)=0xe8) accept$packet(r1, &(0x7f0000008800)={0x11, 0x0, 0x0}, &(0x7f0000008840)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000008880)={@multicast1, @dev, 0x0}, &(0x7f00000088c0)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000009100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f00000090c0)={&(0x7f0000008900)={0x788, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r4}, {0x1b4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x37}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x5, 0x1, 0x837b, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x220, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff503f}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x0, 0x5, 0x6, 0x7}, {0x0, 0x9, 0x0, 0x4}, {0x5, 0x50, 0x0, 0x9}, {0xffffffffffffff5d, 0x6, 0x5, 0xffff}, {0x1ff, 0x0, 0x3632a33a, 0x9d5}, {0x1000, 0x22c, 0x7fff, 0x2}, {0x3, 0x9, 0x2, 0x1}, {0x1f, 0x3f, 0x0, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r11}, {0x178, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}]}}, {{0x8, 0x1, r16}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xe18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x84, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xd9}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x4}}]}, 0x788}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f00000000c0)="2e528b9ef26c0d66f0dcb06d9b37fdf4fccbbbcfeed0a9fefd0ef4ad7b34e44639237fbba7cf40c021426b66d9e9190536d544e27eb102922166350f20e0d1688da9fac9e64522f789e05bbab2e7b7e2b13de40952d3f67296b2b3ff01c7bfbc8d8c7b5e0fc856cb8f67ee4b37225bf071c6963b5e6e448f283c48058d52b4c0f9f2a2da1867239ffc3303cc3bf4e0ecf983de0ab933aba85bfe91c31c7b8c39301cc8a79b8257d8a1cf0450df15357bfd31c3128f7d518248a9e6bf83e7029f7f01df0a357f096d00c42acabad55d5e3c0a12de6347") 01:03:45 executing program 1: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x200700) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000140)) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = getpgid(r2) mq_notify(r1, &(0x7f0000000080)={0x0, 0x3f, 0x0, @tid=r3}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000b68a3348000000"], 0x10}}, 0x0) getpgid(r3) 01:03:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="026431011c46c52857fbfffffe0000008da9c16a625d63ffffffff00000000d878"], 0x10}}, 0x0) r1 = dup3(r0, r0, 0x80000) write$P9_RREADDIR(r1, &(0x7f0000000340)={0x49, 0x29, 0x2, {0x5, [{{0x2, 0x1, 0x3}, 0x9, 0x7, 0x7, './file0'}, {{0x4, 0x0, 0x7}, 0x5, 0x3, 0x7, './file0'}]}}, 0x49) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000100)={'lo\x00', {0x2, 0x4e22, @multicast1}}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000280)) 01:03:46 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02a9ef56249d2412a53b87b240e00000"], 0x10}}, 0x0) 01:03:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380), 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:46 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x5) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x82080) r2 = gettid() write$P9_RGETLOCK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="e716b797280000003701000307000000ff0000000100ebc7a434d113a33d7d137376b0327e15da380c06f829684028655080f23703776f4dc032ef94", @ANYRES32=r2, @ANYBLOB="0a001d70292f6465762f7663732300"], 0x28) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x200000) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000200)={0x8001, 0xf, 0x4, 0x9f118, {0x77359400}, {0x2, 0x0, 0xc000000000000000, 0xfffffffffffff4a6, 0x2, 0x401, "2135b2bb"}, 0x800, 0x2, @userptr=0x9, 0x4}) getsockopt$inet6_dccp_int(r3, 0x21, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000280)={0x1, '{'}, 0x2) ppoll(&(0x7f0000000000)=[{r0}], 0x2000000000000206, &(0x7f00000001c0)={0x77359400}, &(0x7f00000000c0), 0x8) 01:03:46 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x9}}, 0x400000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x7fff, 0x200, 0x5, 0x4, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x7fffffff}, &(0x7f0000000140)=0x8) 01:03:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 01:03:46 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x180, 0x0) 01:03:46 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x122) getsockname$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000140)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02f4ff00000000000000000000000000"], 0x10}}, 0x0) 01:03:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:46 executing program 4: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="050073f9e51bee014de9989e230950a881dac89eaa8626a847211f91587f6ccbffe7f8fbfc1f998549bdd044f9ea5d9c6d"], 0x31) lsetxattr$security_capability(0x0, &(0x7f00000004c0)='security.capability\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:03:46 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070087912b52232795c2373ce008ff0f4ba2b37d529195dc525bf26e23c03edd7f89ae5b9a2c73534d56397178de0d9e1e11d1d8a16db6f14923ab2425c1b0a3c86373b406c4af44a6d2000000005220ba4d88c2f68a40665f015c83f53ae3df6b3d1f5c53566e3bd981fee1cfeaafc17410016872b2b14218cf47372a1c7a914d2b81f4ee79ba0a93766702e256252e6246eb257e5d7773f58ca3df9163d932c0b7a18135f7b51f93727c8fc405054d1250c4276ee668c65cb2568762ec98c8c90c53e88c78f7bc15947887867dae077e9fb839b313141344ed0c077a3ae5d711be798d"], 0x10}}, 0x0) 01:03:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:47 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x17, 0xd96b, 0x8, 0x16, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d5, 0x400080000, 0xffff, 0x73, 0x1, 0xa0000001}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fffffff}, @in6={0xa, 0x4e23, 0xfffffffffffffffa, @remote, 0xfff}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x2, 0x0, 0x6e6bb1, 0xe00b, {0x6, 0xff, 0x0, 0x100000001, 0x0, 0x80000001, 0x0, @in=@local, @in=@multicast1}}, @sadb_ident={0x2, 0xb, 0x8, 0x0, 0x3f}]}, 0xb0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:47 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x400000) socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000000), 0x40000000000011f, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f00000001c0)={0x7f, 0x8, 0x6, 0x401, 0xf, 0x0, 0x6ad4, 0x4, 0xfffffffffffffec5, 0x9}) fcntl$setstatus(r0, 0x4, 0x6400) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x1ff, 0xb, 0x4, 0x80000, {}, {0x2, 0xc, 0x6, 0x1ff, 0x5, 0x8, "2d5d8f65"}, 0x5, 0x3, @fd=r4, 0x4}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{0x0}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:47 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 01:03:47 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x2, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000300)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x2, 0x17, 0xffff, 0xf, 0x200000000000015e, 0x0, 0x70bd2d, 0x25dfdbfb}, 0xfffffffffffffeee}}, 0x7ff) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r3, 0x145e2e7a, 0x7fffffff, 0x1, 0x0, 0x8}, &(0x7f00000003c0)=0x14) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700090e0000000000000000000000"], 0x10}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x100, 0x0) accept4$tipc(r4, &(0x7f0000000180)=@name, &(0x7f00000000c0)=0x10, 0xa71e93e273424ec2) 01:03:47 executing program 4: set_mempolicy(0x4003, &(0x7f0000000140)=0x6, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') r1 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14, 0x80000) dup(r1) bind$xdp(r0, &(0x7f00000000c0)={0x2c, 0x4, r2, 0x14, r0}, 0x10) 01:03:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:47 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x10}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="e7d18788b225c8e12b0198db8fbeebb2748227ce30e6ae21", 0x18}, {&(0x7f00000000c0)="f4f08f1df59f3a2175da1a4123af223f545f21ea6e5c710f525d406de262ba9db9611e43c20ab3fe7a204a7780703e13da", 0x31}, {&(0x7f0000000100)="ebec675d3956029edf64564a5b61b8e623b03115c8745d08890b3d34f876a3f82f6ed5f4dadb82947ada1ac13b1088fe24bd280619a2fea543b77b0c508bbc0ae019bfc1ef4f0c03f34f859fef4b7f4b2dafe26ae72072bde7ba64c7ce7be3d7d674654e329fc5c342dbb64ad06554764a7440bfa438c46beff1f39fad269f561878afb485a99abae849f79a684ff37296f3f2893363c8c9334c70d627f5bbdace003a8cc799a4626ccfe196125fca360a394a068a", 0xb5}, {&(0x7f0000000240)="05dcf53949b93e468aed453a12c0cae38969649195949bfa322bfdc085ecb9414f58c8548aef09793424086bf7aaa0367484cd7282089044d452fe13e124eb589c06487748a16ff53deb1331bd1904b5c9e3dd1434e9534f609d0aaf6b047b2e779e9105de3a17bd7ce0f43a75be3617c1d731de98904efe7bf94a3f3acb14edab4523ebb869ee18ade3c254bb9aa2db6e2bb66ec57cc0a2b77f107a1e94167cb7260494a2a9cb7b179e53", 0xab}, {&(0x7f00000001c0)="a8f72500d77008f7d431b84ac826a628f8e0ec74", 0x14}, {&(0x7f0000000300)="917827d8fdf0ae2ffa251e042462a17e2999ff621657bcdeee05316c", 0x1c}, {&(0x7f0000000340)="40aa3962199dda7db8b2db146188831404f13332a7ceccb60a3fdf17e96f317f0ead1f07020e06", 0x27}, {&(0x7f0000000380)="527013339c3bf99c97135dbd85517ff3451779c2c1c007c437990f1fe0d2fc06c1f6d8a574a9464c4c7fc58ea119457b5e6362915197bdc49448448459203b300543752dd9b18c185687dc0f739ce3e2e1e6e0ca7bb9a3f2d405c3e2c5d8e051b39c499cd086f56e580c5db7016a158fff5ac6e316863eb97bbc5bed099d9d7a39f74f65e3dd4cd7adb02361e23d740611224bad3e91741031ab8e1fdd49d02032f6e10d7060f65a90ee2b48b41c77461d31026234cfe7acef03a08e3fa30128bd72bb0635cf61a5909ce4000309512d9f69d67f31b22c3a347a1822d7470cebf1f880f10ad672c0f56712", 0xeb}, {&(0x7f0000000480)="9d2a70c3cec6505190e7c909a70d1dff56d00222f39fb902e46224697c43ceabd5d957416107d24a6199f2b08b0d720afa1aae2e61705c290ffb36cd8c01a91335c4cff542497c9c9e02271b80ff1b69b3eaddca32442764f788fb9e818f8ae42aecdb0a206b66226acb5ee1742249855daec66a50445c104d3fed0731c0a34ac5999303f512f15a76fee78c316522f814b5c574df9456998ecffe4f0e5900eac188d2d6fe97dd2b7fbbccea9c37929f5779bcda0529c2737ac860914999cf484d", 0xc1}, {&(0x7f0000000580)="9473124f9b0e180cce20832adaae5dde083441cc5f35ab6bfdeacd796e161568b8def1ee394fbe3d80a754bfa3f3090e958ceef62eeddcecf9289cf5db2368a91e8586ad803d3c0c0665feefd6452295c3a5365849641982536f34c3274eb0ee9686f0d6935d89fc676cf1fda5fbf75b65c3a85074fa9855c6e2ca51f9004b1a9848989dd3495d4f6a677f61c611d9317dc55d818ed134cfe94cb625a89302c73a64c33611168ffead88", 0xaa}], 0xa, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000700)={'bridge_slave_1\x00', 0x2}) 01:03:47 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @local}}) pread64(r0, 0x0, 0x0, 0x0) 01:03:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x8001, 0x40a642) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) r2 = dup3(r0, r1, 0x80000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$rxrpc(r2, &(0x7f0000000140)="2aabff424287c9de03e171bdf30545e2cadef1a24d53fcd1c72861c26b5e4d381201be6e985b607dd7de56a09560270b55e769505b76f81090f24f5bfce8334570530cc22a353bfa10a8a7db9da6a3bf5a8387cba3373a81518f478b654acde469b5", 0x62, 0x1, &(0x7f00000001c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, 0x24) sync_file_range(r3, 0x6, 0x7, 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffff9c, 0x408c5333, &(0x7f0000000240)={0x401, 0x40, 0x9, 'queue1\x00', 0x100000000}) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02071307006e00000000000c00000000"], 0x10}}, 0x0) 01:03:48 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020200000000000000000000"], 0x10}}, 0x0) 01:03:48 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000080)={0x9f6}) 01:03:48 executing program 4: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x2c, r0, 0x0, 0xfffffffffffffff8, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000480)=""/161) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)) r2 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r3 = syz_open_dev$rtc(0x0, 0x0, 0xa0480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000080)={0x36, 0x3b, 0x14, 0x0, 0x9, 0x2, 0x0, 0xfe}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port0\x00', 0x0, 0x0, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000ec6fb0)={{}, {0x80}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40505330, 0x0) 01:03:48 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0xf000, 0x6000, 0x0, 0x13002], 0x8, 0x31, 0x5}) 01:03:48 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x401, 0x101000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000000c0)={0x80, 0x10000, 0x6, @remote, 'rose0\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6ca869bb37a7c27e02070009020000007372182805302b135e231742d3677a3b0000000000000000"], 0x10}}, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000100)={0x0, @ctrl}) 01:03:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x98) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) 01:03:48 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x20005, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x800) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in=@multicast1}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207f709020100000000000000000000c6b41654bbd31d620760986b0bd6716d160e194ab68fe67d08102c6754bb817635f47724f7f8741d053968b910931236ece5c16bf4cc56527c24fa6efc6b75422b4564cddb9676d58ba875b1779e29d63ceaf9cc0ca31f0a5dc8b06f4b72291c8c37d5a7f7cd17ee6957dadbdd074b0cf5aab5f566f366a89835800c417c33027827bdbef6100708f9b2b269ca11046de327d028b0893b145f0a5365fecf24c863207cd3b52506593aceddfead36"], 0x10}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb0, r3, 0x420, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1000}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xce7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4000000000000000}]}, 0xb0}, 0x1, 0x0, 0x0, 0x880}, 0x800) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x101, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x80) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000680)="940d11c00f81e445160a113d3acbabeca78575a21f349e61e3ade6f88b65f1768ab8c0a2ffff13b7d29b74a696e1ca13709f362cb7969f12b84caf46b6fd6d2c4901295b661d1506258075a21c00ddfa19f1cd4d880fcd782b95055ad3a0454b81aa1312ef4aa7380f58b07401297256c198f4d9d3c491c24b2b9abb3bebc25d48b7591c118d18d2a9461eff902e53ed76a51f623d5ebaf874ec2378427e16756c9fe867fb4d0c8f5284d60f2da630f69abe22aee449c7b00110ec064a7acf9770528e7b4b7f6b16dafcdcba3899eb54007543df43dd20b064c2", 0xda}, {&(0x7f0000000780)="2968b5abf034a313385afdfac57109e34e4c354019ca3aac4fd24ec0aa35108400d25b8ca18d50b21682ac07c8712dff9a5bb47fbc03e2acc3ebdff84badc8f5050f401ccccd195200372f9288003cf7707c4aaed3e6c480aa37d227d940f5f371c792b3be1f851470af585b07d1d94716565f773dc8a76863c9dc411f", 0x7d}, {&(0x7f0000000480)="3531df365b735c6a078c141056fcf73dd87b640b3a10ccc0ad1385b99b78cd6f8a0157b2e52bc7592bfd56979fdc3e21dfc9cfde95b9a8955b74d3624b8180", 0x3f}], 0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uhid\x00', 0x2, 0x0) 01:03:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, 0x0, 0x0) [ 348.721263] QAT: Invalid ioctl 01:03:48 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000180)={0x4, [0xd8, 0x2, 0x5, 0x9]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x3, 0x8}, {0x8000, 0x4}, 0x4, 0x1, 0x4}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) r4 = syz_open_procfs(0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f00000001c0)={0xd, 0x2, 0x4985}) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}}, 0x8) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x182) socket$packet(0x11, 0x0, 0x300) fchmod(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'bond_slave_0\x00'}, 0x18) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000300)) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000240)) [ 348.769884] QAT: Invalid ioctl 01:03:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) [ 348.904465] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 348.931310] IPVS: stopping master sync thread 14303 ... 01:03:49 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x400040, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020700090200000000008000fdffffff01a326471af40b69d9bc32c1b449d9b2"], 0x10}}, 0x0) 01:03:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x10000) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f00000000c0)=0x80000001, 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x8000, 0x2, 0x400000000000000, 0x6, 0x3, 0x401, 0x9}, 0x1c) syncfs(r0) [ 348.981042] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 348.998109] IPVS: stopping master sync thread 14306 ... 01:03:49 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000000000000020"], 0x10}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {0x915, 0x9, 0x5, 0x1f}, 0x3d, [0x2, 0x7fffffff, 0x9, 0x4, 0x1ff, 0x5, 0x4, 0x3, 0x6, 0x4, 0x0, 0x4, 0x10000, 0x80, 0x2, 0x8, 0x6, 0x7ff, 0x5b30, 0x9, 0x7, 0xfffffffffffffffe, 0x1000, 0xe6, 0xa0, 0x7fff, 0xffffffff, 0x8000, 0xffffffffe36242cf, 0x835, 0x4, 0x5, 0x7fff, 0x1, 0xa571, 0xa02f, 0x7, 0x8, 0x4, 0x0, 0x7, 0x101, 0x5, 0x6afc, 0x3, 0x5, 0x400, 0x1, 0x4, 0x6, 0x38, 0x94d6, 0x0, 0x8, 0x5, 0x0, 0xe837, 0xfff, 0x0, 0xfffffffffffffffc, 0x5, 0x16f, 0x6, 0x7], [0x1, 0x74d, 0x9, 0x3, 0x3f, 0x2, 0x80, 0x0, 0x0, 0x2964, 0x10001, 0x9, 0x6, 0x8b, 0x3, 0x5, 0x6, 0x10000, 0xfffffffffffffffc, 0x8, 0x9, 0xe5, 0xfffffffffffffffa, 0x9, 0x2, 0x4a, 0x4f, 0x39be, 0x4, 0xdfa3, 0x401, 0x7000000000000, 0xffffffff80000001, 0x3, 0x1ff, 0x1, 0x8, 0x5, 0xfffffffffffffff8, 0x100000001, 0x9, 0xffff, 0x5, 0x2, 0x6, 0x2, 0x7, 0x8, 0x101, 0x3, 0x3, 0x0, 0x8, 0xc5fd, 0x10001, 0x0, 0xfffffffffffffef8, 0x7, 0x80, 0x1, 0x5, 0x0, 0x2, 0x1f], [0xd245, 0xffffffff, 0x9, 0xf3e, 0x2, 0x0, 0x6, 0xa227, 0x200, 0x541, 0x7, 0x1ff, 0xaee, 0x4, 0x2, 0x100000001, 0x8, 0xe69, 0x8, 0xffffffff, 0x100000001, 0x7fff, 0x7, 0x8000, 0x7, 0xc7, 0x3ff, 0x1, 0xff, 0x7b1, 0x1, 0x100, 0x3, 0x5, 0x80000000, 0x1, 0x1ff, 0xcfe, 0x91, 0x6, 0xfffffffffffff7e9, 0x4, 0x8ff, 0x5a89, 0xffffffff80000001, 0x2, 0x7fffffff, 0x1, 0xfc50, 0x7fffffff, 0x0, 0x0, 0x5, 0x81, 0x6, 0x8, 0x401, 0x59b72bd1, 0x6, 0x2, 0x3f, 0x3, 0x1, 0x7], [0xd18, 0x3, 0xe5, 0x7ff, 0x0, 0x0, 0x5, 0xffffffff, 0x47760b62, 0x4, 0x0, 0x7, 0x100000001, 0x6, 0x1ff, 0x2, 0x800, 0x4, 0x9, 0x1, 0x9, 0x4, 0x9e, 0x101, 0x7, 0xa7000000000, 0x7fff, 0x0, 0x401, 0x3, 0x0, 0x6, 0x800, 0x1, 0x6, 0x5a, 0x0, 0x101, 0xfffffffffffffc01, 0x4, 0x3, 0xa7, 0x5, 0x2, 0x6, 0x9, 0x39f, 0x9, 0x0, 0xb37a, 0x7, 0x23de, 0x40, 0x100, 0x800, 0x8, 0x262, 0x9, 0x3, 0x4, 0x0, 0xc, 0x5, 0x8]}, 0x45c) 01:03:49 executing program 4: setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140), 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8d, 0x57c}, &(0x7f0000000040)=0x8) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f00000000c0)={0x8000, 0x36314f5b, 0x1, @stepwise={0x6, 0x5, 0xc6, 0x2a45, 0x36}}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000080)={r0, 0xffffffff, 0x1}, 0x8) 01:03:49 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x6) r1 = socket$nl_xfrm(0x11, 0x3, 0x6) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000600)=0xfffffffffffffff9, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2001, 0x0) accept4$unix(r2, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) 01:03:49 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200001, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x1f6, 0x0, 0x10000, 0x800}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)={0x20, r2, 0x2, 0x5f}) 01:03:49 executing program 3 (fault-call:5 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:49 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) [ 350.052135] FAULT_INJECTION: forcing a failure. [ 350.052135] name failslab, interval 1, probability 0, space 0, times 0 [ 350.063684] CPU: 1 PID: 14373 Comm: syz-executor3 Not tainted 4.20.0-rc7+ #1 [ 350.070912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.080316] Call Trace: [ 350.082986] dump_stack+0x173/0x1d0 [ 350.086676] ? __should_failslab+0x278/0x2a0 [ 350.091153] should_fail+0xa19/0xb20 [ 350.094934] __should_failslab+0x278/0x2a0 [ 350.099226] should_failslab+0x29/0x70 [ 350.103184] kmem_cache_alloc_trace+0x125/0xb90 [ 350.107921] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 350.113434] ? sg_read+0xb51/0x33b0 [ 350.117134] sg_read+0xb51/0x33b0 [ 350.120683] ? init_wait_entry+0x190/0x190 [ 350.124994] do_iter_read+0x877/0xe00 [ 350.128868] ? sg_remove_device+0x640/0x640 [ 350.133269] do_readv+0x2a7/0x620 [ 350.136839] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 350.142362] ? prepare_exit_to_usermode+0x114/0x420 [ 350.147435] ? syscall_return_slowpath+0x50/0x650 [ 350.152340] __se_sys_readv+0x9b/0xb0 [ 350.156206] __x64_sys_readv+0x4a/0x70 [ 350.160155] do_syscall_64+0xbc/0xf0 [ 350.163945] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 350.169206] RIP: 0033:0x457ec9 [ 350.172456] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 350.191399] RSP: 002b:00007ff9de025c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 01:03:50 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 01:03:50 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x91) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x2, 0x0, 0x10003, 0xc28}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x7, r2}) [ 350.199155] RAX: ffffffffffffffda RBX: 00007ff9de025c90 RCX: 0000000000457ec9 [ 350.206463] RDX: 0000000000000001 RSI: 0000000020000380 RDI: 0000000000000003 [ 350.213775] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 350.221084] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9de0266d4 [ 350.228406] R13: 00000000004c470c R14: 00000000004d7ca8 R15: 0000000000000006 01:03:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) r2 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x1f, 0x40082) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0xb6, 0x6, 0x200, 0x2, 0x0, 0x4, 0x4000, 0x0, 0xfffffffffffff800, 0x7, 0xf565, 0x0, 0x1, 0x1, 0xed28, 0x2, 0x3, 0x800, 0x7, 0xfffffffffffff800, 0x4, 0x100000001, 0x7428, 0x100, 0x0, 0x20, 0x4, 0x5, 0x20, 0x9, 0x3f, 0x3, 0xfffffffffffff801, 0x1, 0x0, 0x3, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x6}, 0x12000, 0x7f, 0x3, 0x3, 0x5, 0x668a0fba, 0x1}, r1, 0x8, r2, 0x1) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffeff, 0x400000) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000001c0)={0xe10088fc3c75c69c, 0x40, 0x100000001, 0x800, r4}) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x2a, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_delete(r5) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), 0x4) 01:03:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:50 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0xfff, 0x2}) socket$key(0xf, 0x3, 0x2) 01:03:50 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x6, 0x4) 01:03:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:50 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r0, &(0x7f0000432ff8)={0xfffffffffffffffe}, 0x8) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) rt_sigprocmask(0x0, &(0x7f00009fd000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 01:03:50 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x18, 0x9, 0x7, 0x4, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}]}, 0x20}}, 0x400c040) 01:03:50 executing program 3 (fault-call:5 fault-nth:1): r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:51 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xb6ff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e20, 0x7, @local, 0x1}}, 0x8, 0x68, 0x80000007, 0x7f3, 0x1f}, &(0x7f00000001c0)=0x98) r2 = socket$key(0xf, 0x3, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0x2, 0x0) fadvise64(r2, 0x0, 0x3, 0x5) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02072b4379d09d2eb2f2000000000000986fd4fa6281290f53dda328582c6814558e7933c62786f0b5df1020d53859b22beb0000000000"], 0x10}}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000300)={0xbdb, 0x7fffffff, 0x7, 'queue0\x00', 0x7}) 01:03:51 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0xa000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80101, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x9, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 01:03:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20004000) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd917f0686625b3719a8e76c5d4fc5ae2713273a077201276808f2afd49254b6cd542809bf4e999a21f4c56c5877fef1ad8e1e5b57cbb160a9faf747b4c71a72fe6bd5c55607fd13556262cf8628292"], 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80080, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x92000, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x10002, 0x0) modify_ldt$read_default(0x2, &(0x7f0000001700)=""/148, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) readv(r0, &(0x7f00000019c0)=[{&(0x7f0000000540)=""/4096}, {&(0x7f0000001540)=""/247, 0xfffffffffffffe88}, {&(0x7f0000001640)=""/189}, {&(0x7f0000001a80)=""/5}, {&(0x7f0000001ac0)=""/150}, {&(0x7f00000017c0)=""/163}, {&(0x7f0000001880)=""/221, 0x34f}, {&(0x7f0000000480)=""/46}, {&(0x7f0000001980)=""/53}], 0x9d31ca7e19e5358) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x8000, 0x9, 0x80000001, 0x0}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280)=r4, 0x4) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000340)={r4, @in={{0x2, 0x4e20, @rand_addr=0xffff}}}, 0x84) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x14}, @broadcast}, 0x8) ioctl$TIOCNXCL(r2, 0x540d) openat(r2, &(0x7f00000002c0)='./file0\x00', 0x0, 0x20) 01:03:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:51 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x2800) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000080)=""/88) r1 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000140)={0x6, 0x4000}) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:51 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="8c0000007d01000000710007008100000016000000000000000000000000000000000100000003000000800000000000000021009a766d6e6574302d232d5b7365637572697479657468306574683047"], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, &(0x7f00000001c0)}) 01:03:51 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x4, 0x0, [{}, {}, {}, {}]}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1000000000000152) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003f000000000000000000bc00000000000000000000001d0e000014885985000000000000000004000000000000000600000000000000000000000000000000000000fcffffff"], 0x58) membarrier(0x5, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000180)={0xd004, 0x100000, 0x9, 0x8, 0x6}) 01:03:51 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7f000000000000000000000000000000ad81b5fe4a7596b222"], 0x10}}, 0x0) 01:03:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x1000) r1 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', 0x0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000619fcd3823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f00040000000000000000000000000000000000000000"], 0x90) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000380)={0x1, &(0x7f0000000280)=""/133, &(0x7f0000000340)=[{0x200, 0x65, 0xffffffffffffff81, &(0x7f0000000100)=""/101}]}) 01:03:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:52 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x44000, 0x40) connect(r0, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xfffffffffffffff7, @ipv4={[], [], @remote}, 0x4}}, 0x80) r1 = getpgrp(0xffffffffffffffff) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r0, r0, 0x4ee}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2320202e2f66696d65310ab3de86d81a37e108271616dfa275fb5cabb8678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x100000000000038e) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:52 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x1000) r1 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', 0x0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000619fcd3823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f00040000000000000000000000000000000000000000"], 0x90) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000380)={0x1, &(0x7f0000000280)=""/133, &(0x7f0000000340)=[{0x200, 0x65, 0xffffffffffffff81, &(0x7f0000000100)=""/101}]}) 01:03:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x100, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020000000000000000"], 0x10}}, 0x0) 01:03:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:53 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x40) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) 01:03:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0x9, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x100000000, 0x6598, 0x0, 0x6f, 0x8}) 01:03:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000380)='cpuset.mem_exclusive\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x9) 01:03:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/45, &(0x7f0000000180)=0x2d) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000080)) 01:03:53 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x501000, 0x0) recvfrom$inet(r0, &(0x7f0000000240)=""/4096, 0x1000, 0x40000062, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0xffffffffffffffff}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 01:03:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000300)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x4, r2}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x42000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) ioctl$TIOCSTI(r3, 0x5412, 0x8201) 01:03:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x401}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x3}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_VL_CLR(r1, 0x7014) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:53 executing program 1: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r3 = dup3(r1, r2, 0x80000) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x82000000) 01:03:54 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000064001f0014f9f407000904000a7a5714080001000d0000400c00000000000000", 0x24) 01:03:54 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x1, 0x2) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000180)=r2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x13, 0xfa4, 0x0, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x4) 01:03:54 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000004000000000"], 0x10}}, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) accept4(r0, &(0x7f0000001880)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001900)=0x80, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001940)={'\x00', r1}) 01:03:54 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x200000000000020) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fgetxattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00', &(0x7f0000000040)=""/206, 0xce) 01:03:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000040)={0x80000001, 0x0, 0x1982, 0x1, 0x200, 0x2, 0x6, 0x5}, &(0x7f0000000180)={0x6, 0x8, 0x40, 0x0, 0x0, 0x8, 0x6, 0x3}, &(0x7f00000001c0)={0x2, 0x0, 0x160, 0x7fffffff, 0x5, 0x6, 0x3, 0x6}, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:54 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000000400000, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000240)={0x5, 0x0, [{0xc000001d, 0x3be, 0x0, 0x600000000000, 0x1, 0x368, 0x2}, {0x80000008, 0x4, 0x2, 0x7, 0x7f, 0x0, 0x7}, {0x0, 0x8, 0x4, 0x8001, 0x8000, 0x7, 0x6}, {0xc0000007, 0xfff, 0x1, 0x152, 0x101, 0xea9, 0x7ff}, {0x80000019, 0x400, 0x0, 0x8001, 0xd44f, 0x3f, 0x9}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:54 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="0213ea050600000029bd7000fcdbdf2504000700ff0f00005c0b00020007000000000000000000000700000000000000"], 0x30}}, 0x2000c010) 01:03:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:03:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x4000800000000000) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 01:03:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, 0x0, 0x4000) 01:03:55 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10002, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x3, 0x80, 0x6, 0xffffffffffffff49, 0xfff, 0x10001, 0x3, 0x7, 0x6, 0x4, 0x8, 0x7, 0x4}, {0xfffffffffffffff7, 0xe005, 0x0, 0x10001, 0x2, 0x8, 0xa3bb, 0x5, 0xbbc, 0x1ff, 0x3, 0x8, 0x1}, {0x4, 0x6, 0x8c1e, 0xffff, 0x0, 0x80000000, 0x5f2c, 0x1, 0xf2, 0x1, 0x8, 0x3ff, 0x8}], 0x3ff}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:55 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2000, 0x0) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x77359400}}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="00709b563b8dda20bf3700"], 0x10}}, 0x0) 01:03:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000180)={0xffff, 0x9, 0x2, {0x0, @pix_mp={0x5, 0xfffffffffffffff7, 0x0, 0x6, 0xf, [{0x6, 0x1000}, {0x1ff, 0x6}, {0x4}, {0x10001, 0x100}, {0x6dda, 0x2}, {0x2, 0x1}, {0xecb, 0xa0}, {0x200}], 0x4f, 0xe6, 0x0, 0x1}}}) 01:03:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x2c4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0x1785}, 0x8) sendto$inet6(r1, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x0, 0x4, 'queue0\x00'}) 01:03:55 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x1, 0x7, 0x31, 0x0, 0x0, 0x3}, 0x10}}, 0x4000) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, [], [{0x2b9, 0x5, 0x0, 0xffffffff, 0x17c11484, 0xfff}, {0x1, 0x8, 0x7c00000, 0xda03, 0x1, 0x8}], [[], [], []]}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x8000) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000400)=""/134, &(0x7f00000004c0)=0x86) sendto$rxrpc(r1, &(0x7f0000000080)="b349285c98c50f1b01685a4a906c226f053c", 0x12, 0x4000000, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x1ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, 0x24) pwrite64(r0, &(0x7f0000000300)="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", 0xfc, 0x0) 01:03:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:55 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4040, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0xf, @output={0x1000, 0x1, {0x7, 0x3}, 0x9, 0x3f}}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140700090200000000000040090000004763d4f812f35aac9fc00f81f93437f87f875b4ec5f31293aa947dba0b2b99f6d2fa4c776f6722129ed5c047007b524d9e90ebc9b61c31d1f8eda9057304f5203420ef0fe9441c8a164148b2def42a2fe7328ded02b82d84b8d332bb98985047c584449c82597f27b411edbe5fd4f9fe32d77136ac5268d1ac34ce09dc628f9e477853785da9fab3b7bf3cd8fbc419481f3a97"], 0x10}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400000, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x3) 01:03:56 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x5, 0x2, 0x0, 0x10000000000000, 0x3}, 0x10}}, 0x0) 01:03:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, 0x0, 0x4000) 01:03:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x2, 0x80000) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65310ab6de86d81a6b36000016506af7206816dff8e3fb5cabab678b"], 0xffffffbc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00', 0x5b, "384c42765f34ed16a6912d0b63f2e54082424d0b723abdc473b760cac2871246a07812d5da90db2dbde5b5808ea6b450cf9ebad7268e141186a355af1ea9b47da332b32facf37b9639d776eefe673d0b2efe2e170b302e6d7ca50f"}, &(0x7f00000002c0)=0x7f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="7fac1548179193227342f3d0767e9de8", 0x10) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) getsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x4) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1f00000007000000a08bb2dafa026b6f16acf58727de16c9ce590e23f79dd878a2ffbf5ba65a3c398cd8259f1cc7088f6317152307035a49c34eb748eff1d00318a3b0"], 0x400) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket(0x200000000001a, 0x1, 0x1000007fffffff) getsockopt(r2, 0x800000010f, 0x84, &(0x7f00004ad000), &(0x7f0000a3c000)=0xfffffffffffffecb) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 01:03:56 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x42200, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x7) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02b5460746181dcd9cce00001b00000000"], 0x10}}, 0x0) [ 356.508908] sg_write: data in/out 1818846731/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 356.508908] program syz-executor3 not setting count and/or reply_len properly 01:03:56 executing program 2: r0 = dup(0xffffffffffffff9c) write$P9_RREADDIR(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2a0000002902000001f2ff1f040000000507002e2f66696c6530"], 0x2a) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02000000010000050000000000000000"], 0x10}}, 0x0) 01:03:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000180)) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) 01:03:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000001c0)={@remote, r3}, 0x14) setpriority(0x2, r2, 0xe9) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xe) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7f, 0x2) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2f, 'rdma'}, {0x2d, 'cpu'}, {0x2d, 'io'}, {0x2d, 'pids'}]}, 0x15) 01:03:56 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @broadcast, 'gretap0\x00'}}, 0x1e) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}}, 0x0) 01:03:57 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fchownat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1000) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x6, 0x20000000, 0x2000, 0x3, 0x0, 0x5, 0x5f, 0x1f, 0xfffffffffffffff7, 0x1000}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000080)=0x1, 0x4) 01:03:57 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:03:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x6000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180)="092551cc9c51606ccf43e7e670cdccab63385b52b01a4b0b824d3df23ce39fed898725d72ae9dbcbb08f85a94f029ed7f92db468e85ad3ff328bee5000e02601f8c60089d8d41cf20d7ab8faa063846b71aeaf89cc4668b25d91ed6ff1ce36de3d3c331d2fa179db617bc51936c92901417ee4ad5d5b16e0d7010ab6a093ed005e1ab9f00c2ebbf82673c8df2b61b8258cebae1339dcf1cc0a5d7e56387eb25cf0213a6c335b5a997933c477b3ad7ba1ae14aed29344b62517b353186bb745c0bfa0c96b", &(0x7f0000000040)="f394ebbbac96a25755d4c76825dd06fa5a15204ced2ce96570b7e418a0479343983a9283a0a7456f7725ff0f7bc9"}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) mq_open(&(0x7f0000000080)=']:&\x9a\x00', 0x41, 0x108, &(0x7f00000000c0)={0x6, 0x9, 0x8000, 0x3ff, 0x1, 0x3, 0x2c, 0x3}) umount2(&(0x7f0000000040)='./file0\x00', 0x2) 01:03:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, 0x0, 0x4000) 01:03:57 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[]}}], 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x80) r1 = socket$inet6(0xa, 0x3, 0x9) recvmsg(r1, &(0x7f0000004b40)={&(0x7f0000000080)=@l2, 0xfe65, &(0x7f0000004b00)}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000140)=0x810, 0x4) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 01:03:57 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x17, 0x0, 0x9, 0x2, 0x0, 0x2000000}, 0x10}}, 0x0) 01:03:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:57 executing program 1: socket$key(0xf, 0x3, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x17, 0xae, &(0x7f0000000140)="10ac0986163076711c01efaff2357f1f2ac148f5823504122568ecf22c4123b1035dacee81c399691fe41d89549689184717a1f884bc47d4169f382b088ea51df40821d52c776f8729c55801ea82ed0087a9d02bf8f508f17fe28076d29fe7b1c3c66d3faeaadd516c06e78a1a9e99c0e3c3d16f2d54fb1af1cd2059b095df5bc336b4aaaceb67179c39ab37711eea6e8bd5515ab863351467e144c977a04c54fdfd41b283eaad41b9194ee7ed8b"}) 01:03:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r1 = socket(0x400020000000010, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x0, 0x4, 0x8}, 0xc) write(r1, &(0x7f00000000c0)="1f00000054000d0200000000fc07ff1b070404070000000007000100e77565", 0x1f) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @rand_addr=0x5}, 0x320, 0x0, 0x0, 0x0, 0xfffffffffffffffa, &(0x7f0000000000)='gre0\x00', 0x80000001, 0x5, 0x800}) 01:03:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x4, 0x4) sendto$inet6(r1, 0x0, 0x333, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$capi20(r0, &(0x7f00000000c0)={0x10, 0x40, 0xff, 0x81, 0xffffffffffff4412, 0x80000000}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') r5 = shmget$private(0x0, 0x4000, 0x78000080, &(0x7f0000ffa000/0x4000)=nil) shmat(r5, &(0x7f0000ffa000/0x2000)=nil, 0x6000) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x90003000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)={0x304, r4, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffff1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x85ba}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7476}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xe788}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x104, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @loopback, 0xea2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xedf1, @dev={0xfe, 0x80, [], 0x25}}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb77a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1, @remote, 0x5}}}}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) readv(r0, &(0x7f0000000380), 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40000, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000880)={0x124, r7, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffff000}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5336}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffff80}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffd}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x24f73874bb99317a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf809}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x23}}]}]}, 0x124}}, 0x40000) connect$l2tp(r6, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffff9c, {0x2, 0x4e24, @broadcast}, 0x3, 0x4, 0x3, 0x3}}, 0x2e) 01:03:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0xcff4f1adef67ed6c}}, 0x20000000) [ 357.872591] PF_BRIDGE: br_mdb_parse() with invalid ifindex 01:03:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000100000000000000000"], 0x10}}, 0x0) 01:03:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x20000000}}, 0x38) [ 357.979466] PF_BRIDGE: br_mdb_parse() with invalid ifindex 01:03:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) 01:03:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000008a00000000000000"], 0x9}}, 0x0) 01:03:58 executing program 4: r0 = eventfd(0x4) fcntl$setstatus(r0, 0x4, 0xc00) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x24000, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='cpusetem1\'&-GPL/\x00') writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="0eff4a45de15627c", 0x8}], 0x1) 01:03:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000180)) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271639aa211b487013727909432f7f0bab"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FICLONE(r0, 0x40049409, r2) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x80000000, 0x800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x3, r1}) socket$key(0xf, 0x3, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000100)) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8, 0x100) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1, 0x27, 0x1, 0xfffffffffffff605, 0x1154}) 01:03:58 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000140)={0x0, 0x0, [0x2, 0x3, 0x3, 0x8]}) r1 = socket$key(0xf, 0x3, 0x2) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x1) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x7, 0x9, 0x9, 0x2}, 0x10}}, 0x4c011) 01:03:58 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207000902000000000000009534f394dec0d2128374f913a0d2439cad7eec6a07ed27f2915292931270a43c029f37cc"], 0x10}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x104, 0x400040) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x224000, 0x0) sendto$isdn(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xa5, 0x4c804, &(0x7f0000000440)={0x22, 0x5, 0x80000000, 0x4, 0x8}, 0x6) 01:03:58 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x10000000004e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000a00)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) close(r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x101200) ioctl$TIOCEXCL(r1, 0x540c) 01:03:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:03:58 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x80) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xce22}, 0x1c) listen(r0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="5800000014d4c100add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000", 0x58}], 0x1) 01:03:58 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x0, 0x8e}, 0x10}}, 0x0) 01:03:58 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4a07fa3d4894a359d584ab80090200000000000000"], 0x10}}, 0x0) tee(r0, r0, 0xd7, 0x2) r1 = accept4(r0, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80, 0x800) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x6, 0x4) 01:03:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) 01:03:59 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x80) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x40000800) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, 0x0) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f6669d84237e108271616678bd9cf0b8b1c0f67cd0cc1522777ce77aeb72e3eb1200000002b8673b97e2bd7a5d50a737a1768a9f0cde59bf22b6eb9f8723115f8c952a2cac75057efe0d1031eb2a885cf4e75017b1a16d7a47ac28ed03300a804d3a9dd6e39a3b813c579d42721c2239e9e8ae6e71d8e259284f42fcc5492bcef05c2f473a4ae32f6ee257a9f630773aa4ac28eb56c7a8aa4af1b4a52e24553cb38b8d2d832c0e7b4a0e991e9557fa0630600a0aa8e3d667f58bc7653fc3f956df1dc637f38fd7c35ff63a4c8c6407e9dfb869c07d0ef71d1d3c5002a83beb01ff9675fdc2acc2b1a9e073a9824b9705b60f3"], 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000240)='sit0\x00') write$binfmt_elf32(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) dup2(r0, r1) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000001c0)={r2, 0x6}, 0x8) 01:03:59 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xc7, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)={0xa, [0x40, 0x6, 0x3f, 0x7, 0x9, 0x8, 0x10000, 0x800, 0x6, 0x6]}, &(0x7f0000000200)=0x18) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\x00\x7f\x87\n0\x8b\x1e:y\x8f\xa7\x88p\xf2\xfcE\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbu)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\x9b\xac\xfe\x12\x9e\r(K\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000480)) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 01:03:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207800902b54e52fb00000000200000"], 0x10}}, 0x0) pwrite64(r0, &(0x7f0000000080)="f89220760cc9c593cac15cbe0c08fd2aab8f24cae9db5ebbbb860db83edf3cfb166d4dfccf9c9294fe7441605e5d86ce9b1e4b0d7546f17f8b9a0e8aaf71d65f54898754e6017da5bb90e955eb5b150aefb25e5210e5487a059321da28429383", 0x60, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x88000, 0x88) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000001380)=""/178) pipe2(&(0x7f0000001440), 0x84800) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}]}) sendmsg$key(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)={0x2, 0x8, 0x2, 0xb, 0x203, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_sec_ctx={0x201, 0x18, 0x0, 0x6, 0x1000, "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"}]}, 0x1018}}, 0x8080) 01:03:59 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffff, 0x26000) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000140)={0x4, 0x7, 0x6, 0x0, 0x7df2, 0x1}) accept$inet6(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) 01:03:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="063575db0b0922a0bbbbb93ae2cd9e833ba08b13539f8ebdf7e3b61e7dc2a7634541da20cc22e4dd1db080d7b5cdcf529d257a9d1d10b7c1f761921d5d376f20b109f9ec7b397b0e1fbbaf148491d3e342d8369a3ea174dd5928750a9c6c9f8da8d5adab17c17ffc7951aa0126c71c2238d358b0"], 0x10}}, 0x0) 01:03:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2f, 'cpu'}, {0x2d, 'cpu'}]}, 0xa) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) 01:03:59 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) 01:03:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffff00e, 0x80200) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, {0x306, @random="94363fdcd9a2"}, 0x8, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 'dummy0\x00'}) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[]}}, 0x0) [ 359.654932] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 359.654932] program syz-executor3 not setting count and/or reply_len properly 01:03:59 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40400, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x101, &(0x7f00000000c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 359.739211] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 359.739211] program syz-executor3 not setting count and/or reply_len properly 01:03:59 executing program 4: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$notify(r0, 0x402, 0xc) r2 = socket$inet(0x10, 0x3, 0xf) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010407031dfffd946fa2830009200a0009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 01:03:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) 01:04:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x4001, 0x0) connect$l2tp(r3, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x2}}, 0x26) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x800) mkdirat$cgroup(r4, &(0x7f0000000340)='syz0\x00', 0x1ff) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000001c0)={0x2, 0x200, 0x7, 0x3, 0x8, 0x5, 0x5, 0x8, 0x20, 0x48, 0x5}, 0xb) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000035f90000000000000000000000002000008000d1949052204f3ecc38751f64ae20c6000000000000000000000000000000000000000000a0fe97dd04000ad78871400000000000000000000000000000000000cbfc5ca904d9b0c2a68f9c557e00000000adde05651ae91cd2751d5c8dfd0753c8a4d1a3b6c567a84c06e27618ccfed76fee9869d5a187b78fe6a0692408113acbd85357e3dc7f1ea09bd6a994710a1c8725b235071731018eae8bc28a04942cdac29b612f1d74e1e1996143744a9fc9b6a501e4541c9ca375854190937d867f12d7c0ba"], 0x58) 01:04:00 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000080)={0x4, 0x7d2, 0x9, 0x3, 0x2, 0x5}) 01:04:00 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) 01:04:00 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', @ifru_names='ip6_vti0\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/94, &(0x7f0000000180)=0x33) [ 360.362240] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 360.362240] program syz-executor4 not setting count and/or reply_len properly 01:04:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) gettid() ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYBLOB="1bb0de49278cf6a255804ed1aaad4a922fd11e5b9f880dd1cf6dc55f84c986a7c98473d773710487a9565ee24763ecb4b42454b68d282c041d2f871a071eedf1832ea2b7270c40bd598eb061ecc130570788b1637dd31f70c61b8f0c952f6f21f8fd1f4d6089ee002d863fea068185f10cbcd315bf097a9a176b5c9a9c18809119b61b42dda2bb051afe8c3d73bd3228", @ANYRES64=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0], @ANYRES16=0x0]], 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 360.478087] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 360.478087] program syz-executor4 not setting count and/or reply_len properly 01:04:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) 01:04:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xd) r1 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={r1, r2, r3}, 0xc) r4 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0xef13, 0x501800) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000380)={0x5, 0x1f, 0x1, 0x1, 0x7, 0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0xffffffff, 0x4240) 01:04:00 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) 01:04:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="020700ef15da91b010120860495299fda618ee5f02dc5e8c3f35617a486f5dedcd3b9e54bd5f3b731573004f71ccefe7f128aafdb6a3568c07d24e47e75a903ec09d4e6265c6b07e0507c60000000000"], 0x10}}, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000240)=""/96) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) ioprio_get$pid(0x2, r1) r2 = semget(0x0, 0x4, 0x88) clock_gettime(0x7, &(0x7f0000000080)) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f0000000040)=""/12) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x40, 0x10002) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7fced3d7, 0x400000) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000140)={0x7fff, 0x3, 0x5, 0x2, 0x8}, 0xfffffffffffffca5) 01:04:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) fstat(r0, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 361.152999] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 361.152999] program syz-executor4 not setting count and/or reply_len properly 01:04:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) bind(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x1, 0x1, 0x3}}, 0x80) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) [ 361.344460] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 361.344460] program syz-executor4 not setting count and/or reply_len properly 01:04:01 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x2000}, 0xfffffd66}}, 0x0) 01:04:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) 01:04:01 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) 01:04:01 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x2000, 0x10) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000540)=0x10f000) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x6, 0x9, 0x8, 0x2, 0x7ff, 0xfffffffffffffffb, 0x7, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x83, 0x0, 0x1c0, 0x8, 0x9}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000004c0)=0x2a2, 0xfffffffffffffe19) sendmmsg$inet_sctp(r2, &(0x7f0000000480)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="f41025c78adafd09701a0751784d041977b2247455127c3a12c933f95d723e48a6b833b6c44cc0fbbe36a9460ec8434981d97fb572fb9a7aa14647044aa9d841bd034dc82babd624f15bf5dcb8fa1429242a26cf3d9c0abd04f1a9268061322eff0fde0fac3242f7ceb4365e70bf74860fab4f282711219c059a642c85525e05e4e6a81ea311e642038b23d93166eb588645890d936ce2a65eec333fb84854b4fc77bf4d28f87c0971beccb3ba1eb185c1bc3ec65d0f4f46e1ea3c566eb32229c252e7b0655312bd0f893ea2d1336e297b25508e5bedffb2c9", 0xd9}, {&(0x7f0000000140)="13aed3ef72c3d0bb76afcb36d7f0f58c00b74345022c90760e50945c0f519643c8c600521643f76a692e2514d46bf67f8095612ae5fd33c582469338eb3db98a8c19d8186c1741e16c39c89ab8d571", 0x4f}], 0x2, &(0x7f0000000400)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x200}}, @init={0x18, 0x84, 0x0, {0x3, 0x6, 0x7ff, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8, 0x3, 0x0, r3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}], 0x68, 0x800}], 0x1, 0xc044) 01:04:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x121080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3ff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffff9c, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f0000000540)=[{}, {}, {}]}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0xfffffffffffffb25}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x2, 0x2, 0x9}, &(0x7f0000000280)=0x10) [ 361.746084] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 361.746084] program syz-executor4 not setting count and/or reply_len properly [ 361.864098] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 361.864098] program syz-executor4 not setting count and/or reply_len properly 01:04:02 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000000c0)={r1, r2/1000+30000}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:04:02 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400900, 0x0) getsockname(r0, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f0000000280)=0xffffffffffffffea) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000080)={0x7, 0x4, 0x7ff, 0x7fff, 'syz1\x00', 0x5}) 01:04:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3d, 0x103080) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x0, 0x2002) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xc387) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 362.222618] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 362.222618] program syz-executor4 not setting count and/or reply_len properly [ 362.315176] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 362.315176] program syz-executor4 not setting count and/or reply_len properly 01:04:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4000) 01:04:02 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) splice(r3, &(0x7f0000000240), r0, &(0x7f00000002c0), 0x9, 0xe) write$binfmt_elf32(r2, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r4, @ANYBLOB="66b9d57348d5f48667feaf1bb335153856bb2be5a7c5cc4f3d01d6bdae5adfad6ece750d6ca2e5bf31efe7d55aec391856c1a2730b7a307e5c7dfc7712b8e907600f39b9a32a74f57818ea5dfa0f1ab0324a0f1262a2688b5eafa1"], 0x25e) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) 01:04:02 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 362.650081] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 362.650081] program syz-executor4 not setting count and/or reply_len properly [ 362.749120] program syz-executor3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.754539] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 362.754539] program syz-executor4 not setting count and/or reply_len properly [ 362.791776] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:02 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x40000000000000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x5, &(0x7f00000000c0)=0x4) 01:04:03 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0a070009020000000000000000000000"], 0x10}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xb3, "2eb39fccaa64ef86f5cea0ef61a197bb9b102248f9b4824250b61213b685cd644f8e3f365dcee0775052b815a86dcbfc7347d57e41a116f0e71ed8de8775bbe02bbcbac7d6c014b9bbd855aa1e50ec7537940505cad5eb2b39e4de7203f86b7c8b7d599df4df4a7380078df08e42b964b7714cd9687fe9b4922c8aaf9d40e94634727337c1edd4d77b4a65ff0852afcae712fd59e56a239a5d251a0b74707e3f36a9b45db70aa7d2c86926fafc764b781be2c9"}, &(0x7f0000000080)=0xbb) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x7, @loopback, 0x9}}}, 0x84) [ 363.246116] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 363.246116] program syz-executor4 not setting count and/or reply_len properly 01:04:03 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x0, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:04:03 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000000000003900000000"], 0x10}}, 0x0) [ 363.433209] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 363.433209] program syz-executor4 not setting count and/or reply_len properly 01:04:03 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x20000, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0x10000, "2f7bef0a93531554042d97d5e1be0936e6efcc05afd4a82623aaa9618b3af416", 0x2, 0x620, 0x1, 0x40000000, 0x8, 0x3, 0x9, 0x6}) 01:04:03 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xc4, 0x400000) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020000e0ff2effffffff1a00"], 0x10}}, 0x0) 01:04:03 executing program 3: setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000280)=@v2={0x2000000, [{0x9, 0x1}, {0x81, 0x1}]}, 0x14, 0x1) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cababff8bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x305000, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2) syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x16, 0x24000) r2 = dup3(r0, r0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/195, 0xc3}], 0x1000000000000031) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020125382f800000000000000000000000000000000000000000000000000000000000000000000fff879330df32ac289dfeb53367dfaf8345c30533c306a4291bf94069d3d4227c53b61c4"], 0x58) r3 = add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x1000001) 01:04:03 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:03 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x14}}, 0x0) [ 363.867909] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 363.867909] program syz-executor4 not setting count and/or reply_len properly 01:04:04 executing program 3: add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x80000) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000180)={0x3, 0x8}) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f6669abfb93b4a785cc2bc23c1a37e1082716168475e3fb5cabab678bd9d60b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 363.993133] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 363.993133] program syz-executor4 not setting count and/or reply_len properly 01:04:04 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x1f, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}}, 0x0) 01:04:04 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x0, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:04:04 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) write$P9_RAUTH(r1, &(0x7f00000000c0)={0x14, 0x67, 0x80000000000a, {0x400000080, 0x3, 0x5}}, 0x389) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), r2, 0x7a}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) 01:04:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3c, 0x404400) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x1000, 0x7, 0x6, 0x4}, 0x8) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:04 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80480, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) r1 = socket$key(0xf, 0x3, 0x2) flistxattr(r1, &(0x7f0000000240)=""/107, 0x6b) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02070009020000000000000000000200a824b7ac0aad12c6c0b352f0e6ad8527797067de05e6cba4fdf3eb5b1e8c1a693bc7360f33bd6eacd9cee10c4df808dd007102b09ea30edadb5490e51226"], 0x10}}, 0x0) 01:04:04 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 364.624059] Unknown ioctl 26121 [ 364.628014] Unknown ioctl -2138810781 [ 364.647365] Unknown ioctl 44640 01:04:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000008910dea93f221d0c4d00000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000"], 0x58) 01:04:04 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:05 executing program 1: socketpair(0xa, 0xa, 0xcd0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x225, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x4000000000000000, 0x3, 0x800000000, 0x6, 0x100000001}, &(0x7f0000000180)=0x14) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070000000000000004010000000000"], 0x10}}, 0x0) 01:04:05 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80000004144, &(0x7f0000007fff)) io_setup(0xc63, &(0x7f0000000040)=0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @local}}, 0x7fffffff, 0x1, 0x1ff, 0x0, 0xc}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r3, @in={{0x2, 0x4e23, @empty}}, 0x8, 0x8, 0x2, 0x100, 0x8}, &(0x7f00000004c0)=0x98) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_pgetevents(r1, 0x800, 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)={r5, r6+30000000}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7ff, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000500), &(0x7f0000000540)=0x4) r9 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r9, 0xc) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000580)={0xfffffffffffffc01, 0x1000000000, 0x1, 0x5, 0xffffffff, 0xd23e, 0x9, 0xfd, r4}, &(0x7f00000005c0)=0x20) 01:04:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x280002, 0x0) timerfd_gettime(r2, &(0x7f0000000180)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x0, 0x100000000, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:04:05 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 365.311898] Unknown ioctl 26121 [ 365.315502] Unknown ioctl -2138810781 [ 365.340098] Unknown ioctl 44640 01:04:05 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x9, 0x7, 0x1}, 0x9) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009020040000000000000000000"], 0x10}}, 0x0) 01:04:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x833e, 0x4) 01:04:05 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0xc402, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80000) 01:04:05 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108a71616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffffffff00000000, 0x24080) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x6) 01:04:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:04:06 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3ff, 0x3c1101) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000080)=0x1) 01:04:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:04:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000c198000000000017557e7b98155397000000000000000000e6ffffff00f4d997eed0d257f40000000000000000000000000000"], 0x58) 01:04:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xd59e, 0x4000) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000001c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) 01:04:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x4000) 01:04:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:06 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x4900) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x5c, &(0x7f0000000080)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x8, @loopback, 0x100000000}, @in={0x2, 0x4e24, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={r2, 0x6a, "e6ce4732e1a514039f08e8890d92080e239f670c88abfa9c15bf0a13d0a8cf80a38f592543710c57b6d50794f7b9000014d3903c1489c282624fee88ddc9116ba6fb4af72cfc280311ed35991198f437e00b07d995f77eaf079424c98518d2a4b4606ea645568a79134c"}, &(0x7f0000000340)=0x72) mkdirat$cgroup(r1, &(0x7f0000000540)='syz1\x00', 0x1ff) r3 = fcntl$getown(r1, 0x9) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000680)={{0x3f, @multicast1, 0x4e24, 0x2, 'rr\x00', 0x1, 0x9, 0x5b}, {@local, 0x4e23, 0x2003, 0xffffffff00000001, 0x1, 0x7}}, 0x44) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000200)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="0204ff09b094ad66cefa0400e073455b70090000002502000a00a8b974cf87291ae9000000005afce60bbcb48f8bbfb5d518a3e89e06003645decb7d61c7744566c7cd0c"], 0x20}}, 0x1) tee(r1, r1, 0x80, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000400)={{0xb, 0x2, 0x8, 0xfffffffff1f4c914, '\x00', 0xd8b2}, 0x2, 0x20, 0x100000001, r3, 0x1, 0x1, 'syz1\x00', &(0x7f00000003c0)=['selinuxsecurity\x00'], 0x10, [], [0x13a, 0x1, 0x100, 0x1]}) sendmsg$key(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x800007, 0x0, 0x9, 0x1b, 0x0, 0xfffffffffffffffd, 0x25dfdbfe, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e20, @rand_addr=0xc0}}, @sadb_x_filter={0x5, 0x1a, @in=@rand_addr=0x5da16a42, @in6, 0x1a, 0x4, 0x4}, @sadb_address={0x5, 0x17, 0x7c, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x1000000000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x0, 0x8, {0x6, 0x3c, 0x80000000, 0x2, 0x0, 0x100000001, 0x0, @in6=@remote, @in=@empty}}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x9}]}, 0xd8}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000380)=0xaf5) 01:04:06 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x111000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) [ 366.802251] sg_write: 10 callbacks suppressed [ 366.802281] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 366.802281] program syz-executor4 not setting count and/or reply_len properly 01:04:06 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000240)="0e050aba241485be82579eefa7a12f2a9e1d768495909f585bff88ccbed551e5e81a4b1229142541888e45aaafd65fd46446d6e65640cc31016cc25869d854e658a8c05b4e9c8cbe7ce44c4d46e357f323bc863263a03611130289ad726d5c277f3c9619d1b1e9130e240c7937756755efe7839aad2842d9db0c7c918c4b400fa454297f36a1a60e69a11a922684f9ffdc610e4b99166b2c3cb60dfe8a5e6d447e57694ef77cdb52e5e1909a28624b74556d3d8ba00c599ca27359938e81923d432f8b8a4f2e5cbad39e18bd23b415448c", 0xd1, 0xfffffffffffffff8) keyctl$instantiate(0xc, r0, &(0x7f00000000c0)=@encrypted_new={'new ', 'default', 0x20, 'user:', '', 0x20, 0x7}, 0x27, r1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x6000, 0x0) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000340)={0x8, "72c7fb8c029181b95dac03890fb0832f29ff3af6247a4a23b7aa9bf7c52d4dbd", 0x3, 0x400, 0xd1e, 0x9, 0x1e, 0x3, 0x2, 0x7}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207000902e8ff000000000000000000"], 0x10}}, 0x0) 01:04:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) socketpair(0x8, 0x6, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x1, 0x100000001}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0x3, @mcast1, 0x6}}, 0x1200000000, 0x1e}, &(0x7f0000000240)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000280)={r4, 0x8}, 0x8) 01:04:07 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:07 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000000c0)) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x498, 0x278, 0x0, 0x0, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x138}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', 0x40}}}, {{@arp={@remote, @multicast1, 0xffffffff, 0xff000000, @mac=@broadcast, {[0x0, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x6, 0x3, 0x4, 0x8, 0x8, 0x100000001, 'vlan0\x00', 'ip6erspan0\x00', {0xff}}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast2, @rand_addr=0x80000000, 0xf}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, 0xffffffff, 0x0, @mac, {[0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x5, 0x2, 0x9, 0xfff, 0x2000000000000000, 0x7, 'bcsh0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x0, 0x102}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x80000000, 0x80000001}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) [ 367.278534] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 367.278534] program syz-executor4 not setting count and/or reply_len properly 01:04:07 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="eb280a1a75511eb82753cf3edb473d6a", 0x10) close(r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009020000000000000020000000ea0c013a6a5c87be5ac98033edce81110902e6c4f6dd4c3943f24d105928c45c87f64589f25951b7e8e7d784964b967a3f8d246d3224c70c3bb6382c5021b9329eadb8aa1794d26426543e5b87bd931947867e3b2c8565666617a3df8f625759eec9057bdf92812c82ef4852c7088d2357f86d67fa420a0f36ec2f94cb554eff37e7e54902feaf91e4bacec38a9400f29f06c44a008914a99cd136ff1211d5a5063d5c077e3dff3d1a33bdca4b3fef6df9c57a98915fc54f586896f580dadfafad2b"], 0x10}}, 0x0) r3 = dup3(r2, r2, 0x80000) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x6d, 0x401, 0x9, 0xba}}) 01:04:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f666937e15e0fb66ddff8e3fb5cabab678bf9cf0b8b1c000000000000000000"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4000400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fchown(r2, r3, r4) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000d12b48490000002000000000120000000000000000000000000000000000000000000000000000000000000000000000000000ff00"], 0x58) 01:04:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfc}, 0x10}}, 0x4000) [ 367.380919] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 367.380919] program syz-executor4 not setting count and/or reply_len properly 01:04:07 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="02070009020000000000000000000000c2bf1364bb732a8fe63e94c0954fee5d0c7dedf9d56305994720d2c542c1fa2b5abd656c0d6704f8d6b7da20ee1ba2a19056eef738c07ab91e7af43450105b3003d21221a584a007cdafab1b39e96d675cc573d1aa96c76870919349b63aebf03d8985b17bb6"], 0x10}}, 0x0) 01:04:07 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) syz_emit_ethernet(0xe3, &(0x7f0000000180)={@remote, @dev={[], 0x25}, [], {@ipv4={0x800, {{0x1b, 0x4, 0x0, 0xffffffff80000000, 0xd5, 0x68, 0x1, 0x8, 0x16, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp={0x44, 0x20, 0x7, 0x3, 0x7, [{[@multicast2], 0x800}, {[@multicast1], 0xf0b}, {[@local], 0x8}, {[], 0x100000001}]}, @timestamp={0x44, 0x38, 0x1, 0x1, 0x5, [{[@local], 0x200}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x7fffffff}, {[@dev={0xac, 0x14, 0x14, 0xa}], 0x5}, {[], 0x9bf}, {[], 0x200}, {[@dev={0xac, 0x14, 0x14, 0xa}], 0x100000001}, {[], 0x4}, {[], 0x3}, {[], 0x40}]}]}}, @udp={0x4e21, 0x4e23, 0x69, 0x0, [@guehdr={0x1, 0x0, 0x9, 0x8, 0x100}, @guehdr={0x2, 0x3c3d, 0xffffffffffff0000, 0xffffffff00000000, 0x100, [0x80]}, @guehdr={0x2, 0x4, 0x3, 0x1, 0x100, [0x80]}, @guehdr={0x1, 0x3, 0x5, 0x80000000, 0x100}], "e9910102d2212e478c2010cd967164e8c634eed5905408d5c09c1e2b4882a172d2307195f32dc260cc484aa9aae0e98b3eb029f3686d02dcd317c54ee54b4b770b765ff28bce7ce62c"}}}}}, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000"], 0x58) [ 367.814775] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 367.814775] program syz-executor4 not setting count and/or reply_len properly [ 367.912877] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 367.912877] program syz-executor4 not setting count and/or reply_len properly 01:04:08 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:08 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) 01:04:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfc}, 0x10}}, 0x4000) 01:04:08 executing program 0: r0 = dup(0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000180)={0x3f, 0x80000000, 0x2d327f2, 0x3}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:04:08 executing program 3: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) fstatfs(r0, &(0x7f0000000180)=""/203) r1 = syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x0, 0x200002) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x10440, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x1ff, 0x1], 0x2, 0x7, 0xd55, 0x6cb, 0x8000, 0x0, {0x8, 0x7, 0x0, 0x7fffffff, 0x7, 0xffffffff, 0xe68, 0x4, 0x7ff, 0x7, 0x3ff, 0x0, 0x8, 0x1, "0ed6b39d77a917eaa8c8a855f5d52039b71ba7df0e30b0a89371203edbce38d5"}}) ioctl$SG_IO(r1, 0x2285, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9910b8b1c7b92917ce97bc81ead1745e0500d59538d04160f2b3d0a501698d039d8a88561f44158"], 0x24) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044eaff9cd0a3fe7195067f49895a77d04633539e7afae359fd89e06eef63e2a5d950f215f6df4323d799f089f46b052b33dcc0f63d5d2a610358cf157e15fdb3de23ddc64e4e47cb63110a16c25c398db3229d1d96fb751051"], 0x58) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000340)=0x9, 0x4) 01:04:08 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfd}, 0x10}}, 0x0) [ 368.294018] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 368.294018] program syz-executor4 not setting count and/or reply_len properly 01:04:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x148) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000200)={0x2, 0x2}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:08 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 368.821599] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 368.821599] program syz-executor4 not setting count and/or reply_len properly 01:04:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x4000) 01:04:09 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x80, 0x404000) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$can_bcm(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f0000000180)={0x1, 0x440, 0x8, {0x0, 0x7530}, {0x0, 0x2710}, {0x0, 0x1, 0x9, 0x3}, 0x1, @canfd={{0x1, 0xa21e, 0x3ff}, 0x2b, 0x1, 0x0, 0x0, "515c9bf1a70503a7919b2f808d682d1a68034e1f658895238f55059b080c250c80aaf47edde7c9e1ddeedd1b42ee1b8409d4061782c43cebbf6490018b123f14"}}, 0x80}}, 0x800) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) shmget(0x1, 0x1000, 0x7c000a84, &(0x7f0000ffe000/0x1000)=nil) 01:04:09 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpgid(0xffffffffffffffff) r2 = geteuid() r3 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x298, 0x8, 0x4, 0x0, 0x70bd29, 0x25dfdbfb, {0xd, 0x0, 0x6}, [@nested={0x8, 0x96, [@typed={0x4, 0x37}]}, @nested={0x1c, 0x2f, [@generic="6574ba896d0fb0a0e2417360811a91aa45c4a27d06c1"]}, @nested={0x260, 0x3, [@typed={0x8, 0x56, @pid=r1}, @typed={0x8, 0x67, @uid=r2}, @typed={0x24, 0x27, @str='em1:wlan0keyring#vboxnet1vmnet0\x00'}, @generic="00578451ea17db1395c235417ac7378c80c4a24f5f25e723ff18f8892d6224fd3c4fa8c84587a42bab0359a2bbac7509faa355478a52ce74493ca38a106cf38d69503d075417fa6d72b264774a721314befa725641c745c0c167ad664bb0469534e77b92e8da81935be4f40a9094ce3139c205aa33905cba6431ef70ce7bc655a504522bb4e8506961", @typed={0x68, 0x7, @binary="358f214a7b64953616c2006515dbb70c138ea188e128d0ab69c0281352b15f0ba2f6161d16b02d26b2eb06f246259d9a06ab2f947f1c27d61160e51acb9bd33f1dcbb21d31cf402b04c53cd53aa598fa4c9af724896893e5330f715cc022711e4099"}, @typed={0x8, 0x73, @pid=r3}, @generic="f4edf5ce5fb731a54005b97da3ebb02c793b42f0aafbb8d79f70801726d12a1a2fb2022ccbebfac3022ef40b8771762a4d5173de7a8b369efec53ebeb2d2c15506c7dcd502e17922d20f2624ba59b271849401e15f0167d1dfba8b0fafcb354cd0b280e79526a0571f65f8776c69a649d8e87ed3c26a9e2ea4ab9ae9c5a237aab9593df2dc004ebd135a9b4f7be8bffcf46ac847ac0306ae55140ed7f79a4d6ea7908f565b45b58228c13922258be425a77d0afb6cbabe00a090e8e80180d37341c94246e955a7aa938613c32a9226fdfc239b60722e98ebf3db01cd0f79152db2c83f6328", @typed={0x8, 0x7b, @str='\x00'}, @typed={0x8, 0x61, @uid=r4}, @generic="fb62e033bb4c14acea0dadc40edd4f3dd9497533fcf0bfa6a86b49b8284b7e49d5d3dc34f3cb771df3e5bb290c3a46910a11d273335474e25eb0"]}]}, 0x298}, 0x1, 0x0, 0x0, 0x40840}, 0x81) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:04:09 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:09 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020700090200000000800000000000000d60332e61fa0bb0088a00d9db02a544b379d38dd35a233a728b8916cd3c03fdcb43aeeddb2d395aee5773cc947734548e529221e699dbaa346bad7c6c18af1259b3c3c1e1df3f9a677353959d5d82072d661f902fbe12c34112a9c6a89bb37e065c7b79fe65b63a654e4738f3aaae72d9980ae487484e608a890df1d796"], 0x10}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) getpeername$tipc(r1, &(0x7f00000001c0)=@id, &(0x7f0000000240)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 01:04:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3ff, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 369.398908] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 369.398908] program syz-executor4 not setting count and/or reply_len properly [ 369.602654] protocol 88fb is buggy, dev hsr_slave_0 [ 369.608488] protocol 88fb is buggy, dev hsr_slave_1 01:04:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000280)=0x5) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e1082716160bf8dad97ec08199e8ea6088e3fb"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x80000001) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000f2ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000c3dd11c7c1b67079f328859e6039de453a62ccefc58952f8953ff5527bf5962998fbd197f704459874b1f62c006a33d7e3da0a1babcd5210f4aedc6987df4a40c7e2dc936a334c79bc5f91"], 0x58) 01:04:09 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 369.762494] protocol 88fb is buggy, dev hsr_slave_0 [ 369.768519] protocol 88fb is buggy, dev hsr_slave_1 [ 369.842320] protocol 88fb is buggy, dev hsr_slave_0 [ 369.847915] protocol 88fb is buggy, dev hsr_slave_1 01:04:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x4000) [ 369.968172] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 369.968172] program syz-executor4 not setting count and/or reply_len properly 01:04:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x10000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000240)={0x8, 0x120, 0xfa00, {0x1, {0x2, 0x3, "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", 0xb4, 0x9a6, 0xfffffffffffffffe, 0x2, 0xf9d7, 0xffff, 0x8}, r2}}, 0x128) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:04:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2, 0x0, 0x0, 0x25dfdbfc}, 0x10}}, 0x0) r1 = getpid() ptrace$peekuser(0x3, r1, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x600, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x20}}, 0x840) setsockopt$inet6_dccp_int(r2, 0x21, 0xfffffffffffffffe, &(0x7f00000002c0)=0x400007, 0x4) 01:04:10 executing program 1: r0 = dup(0xffffffffffffffff) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x10001, 0x3}, 0x4) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 370.116672] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 370.116672] program syz-executor4 not setting count and/or reply_len properly 01:04:10 executing program 3: ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpgid(0xffffffffffffffff) setpriority(0x0, r0, 0x93c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r1, 0x2, 0xd8, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4fde, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000180)) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000240)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:10 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:10 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000180)={0x4, 0x2, 0x1}) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e474b3a4511ba755ede86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0xffffffffffffffb2}}, 0x4) 01:04:10 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="02074009023a2e336b05005fec0e48010000000000000000000000"], 0x10}}, 0x0) 01:04:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x4000) 01:04:10 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009040000000000000000008100"], 0x10}}, 0x0) 01:04:10 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) 01:04:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1, 0x4) socket$unix(0x1, 0x5, 0x0) 01:04:11 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(0xffffffffffffffff, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x9, 0xb, 0x0, 0x4, 0x0, [@sadb_ident={0x2, 0xa, 0xfff}, @sadb_x_nat_t_type={0x1, 0x14, 0x401}, @sadb_lifetime={0x4, 0x0, 0x3c, 0x5, 0xffffffffffffd437, 0x6}, @sadb_sa={0x2, 0x1, 0x4d6, 0xc2, 0x1, 0x62, 0x2, 0x1}]}, 0x58}}, 0xc000) 01:04:11 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x109) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x7) 01:04:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x20000000000000b8, 0x0, 0xfffffffffffffffe}, 0x10}}, 0x0) 01:04:11 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000140)=0x14) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:11 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'sit0\x00', {0x2, 0x4e22, @multicast2}}) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[]}}, 0x0) r1 = dup(r0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001900000826bd7000ffdbdf251c3400c9ff0000000000000008001a000500000008000400", @ANYRES32=r2, @ANYBLOB="0c000100000000000000000008000400785251b9d0250aa4bb52fb58c6aa329a1af54770b6446aee12394a11cd7b4287f30318089ee8533c233e266b111758de4ef62022909b37f8031047c8aa68915575eb6f5ad2f9c7c2a0183237320c0665cab93febc2e08df5e6eb1c4f520c860dae8db636a9bf855c337173e878fe5ddb9f9f9a60aa4039bb6d2148e72f7207e39b85cf310cfcce3372be0df1a02ca33d5c46eec86426d04b1b3b7b858993f6bfa5c44767d5132d4ad6ec08da833a43904186b022a14e9839f8bd20345bf701feffff137e349bbc174f9ac1e800c76b83daf099314804a01b928455614a9443", @ANYRES32=r3, @ANYBLOB="1c000100000000f000010000000000000000000000000070000000000c0001000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x8000) 01:04:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:11 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:11 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[]}}, 0xfffffffffffffffc) socketpair(0xa, 0x5, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xffffffff, 0x5, [0x8, 0x2, 0x4, 0x6, 0xdedb]}, &(0x7f0000000080)=0x12) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r3, 0xffffffffc3c2d494}, &(0x7f0000000140)=0x8) getsockname$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000240)=0x6e) [ 371.817806] sg_write: 5 callbacks suppressed [ 371.817836] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 371.817836] program syz-executor4 not setting count and/or reply_len properly 01:04:12 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000003c0)='/dev/swradio#\x00', 0x1, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x40}}, 0x20004000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x8, @pix={0x9, 0x7, 0x41564e57, 0x8, 0x40, 0x3f, 0xe, 0x2, 0x1, 0x4, 0x3, 0x6}}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={{r2, r3/1000+10000}, {0x77359400}}, 0x100) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x1, [0xaeb8]}, 0x6) [ 371.890181] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 371.890181] program syz-executor4 not setting count and/or reply_len properly 01:04:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x80002) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) fcntl$setown(r0, 0x8, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000070000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) 01:04:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:12 executing program 0: getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x4002, 0x0) write$P9_RLOCK(r0, &(0x7f0000000100)={0x8, 0x35, 0x1}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x7, 0x0, 0x9, 0x20000000000001d5, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x0, 0x800, {0x6, 0x0, 0x101, 0x6, 0x0, 0x4, 0x0, @in=@rand_addr=0x4, @in6=@dev={0xfe, 0x80, [], 0x1d}}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x6e6bb8, 0x0, {0x6, 0x0, 0x1, 0x9, 0x0, 0x9, 0x0, @in=@multicast1, @in6=@loopback}}, @sadb_x_nat_t_type={0x0, 0x14, 0x2}]}, 0xa0}}, 0x0) 01:04:12 executing program 1: r0 = getpgid(0xffffffffffffffff) get_robust_list(r0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f00000000c0)}, &(0x7f00000001c0)=0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x2, 0x3, 0x6, 0x7f, r2}) [ 372.266076] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 372.266076] program syz-executor4 not setting count and/or reply_len properly [ 372.364366] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 372.364366] program syz-executor4 not setting count and/or reply_len properly 01:04:12 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:12 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x400800) write$nbd(r0, &(0x7f0000000140)={0x67446698, 0x0, 0x2, 0x3, 0x2, "a18640dd6b58ec80bc7b64c3fdb1e19ffe1f8961ec015c4014b8c3555414768b32d510b589d9b064e0cfbe6f7bf1d2f367e76053c94b8f26196b5e382e6b8b6501920cd2a04b8d1219e73b8fa63c216086116eea0205e41573cc271e2e1f3b3c94c71cf5a400d8f6fb363be02cfa33efb29eb7354086a3008bdb657e2ed63bc961e2450f6cc739fc1fe50938e884bbbe76fd106321a031dba5da9743"}, 0xac) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:04:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020700090200000000b72b1a671878a5248a5c0100"], 0x10}}, 0x0) 01:04:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 372.684819] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 372.684819] program syz-executor5 not setting count and/or reply_len properly [ 372.779812] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 372.779812] program syz-executor5 not setting count and/or reply_len properly 01:04:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:13 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f0000000700)='/dev/dsp#\x00', 0x100, 0x280) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x5, 0x6, 0x8, "e18398d645db208358c6f6575433e6d63dbe6d63deb745200ca6b749ebb544094b989a600dd7b281e6cdc353df1ec354b6e87fe57a76db6c4425647ea30c2f2f", "c93d0d9b31f2f3e6779342dedcc71c6561f4a44c66042258cb07beb0a6aadf364088566ba46fe103b5b019d9b673254ab5080ac9b7bb572ff0d3e12581269334", "d86b5e360f83a00d90daa1222912b0ca922b9113dda60d6d5ba7d949532c6bba", [0x6f, 0x100]}) rt_sigtimedwait(&(0x7f00000002c0), &(0x7f0000000100), 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="4736905c4fd95906b38cd6443eb289805abb3cb6150c47bfc440a2fffd48a954493ba9ed94291bb2c0e32a7f31b4965c13078cfb43fba8785a2d040ccb17be8147932b1f4129aa162e3aa071a1abfe644e1c02cfe00b37fcf8700962188f53dd4979553fd52c78c5589beb1e18dc5b6a685d9a5bc9183692c487f7fe7189eeb0380668a6be0bd47823d286931ad0ade20774fb716fbcec03aabe42", 0x9b, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000280)=[{&(0x7f0000000540)="09d3b30f16f1ffe5cb35c057f4b26dded21228824ebe544e8c568ee214744e1c875fa4211db9c8e780a91af51179216a15ccb232f4b375779196c88e679618ade7f0dae59bb0023d4f6e97fbc79b34a29ce13df30dd25b62a57f9b48ee98b732b5f612131e38d50f68dce2786145bb80b879199d1697644f33fb80261750c74d1c878f55da2af52b6566ebf7f5e3d20abf88ca29041dd0080e80b0bbf6d804d8fa4df610533c9b57acb0e736f30483c069d98bb06599dd83c79c8e50a8a45eeb1af59e895823fb1a98c70cc284b09bc065678b88d815205f432763d79d29d9ae38067eefddc0acdcef7b5780cc67308af4ee713f29e62d", 0xf7}], 0x1, r4) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x10002, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000680)={r6, 0x10001, 0xff}, &(0x7f00000006c0)=0x8) 01:04:13 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="02070009070000000000000000000000"], 0x10}}, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 373.125000] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 373.125000] program syz-executor5 not setting count and/or reply_len properly 01:04:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000008910dea93f221d0c4d00000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000"], 0x58) 01:04:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r1, 0x80000000, &(0x7f0000000180)="7f51f4f07c3f53935c81b59d4a4cd0f4c666f0dceb07a62832ed93ea5cfec86f708f739123b6838fad369646660a4c316e021d80bd65b0a5b37be1fb922f113785a4b5900ec3a02d72bb07d0769dfba3f0f0") ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:13 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x4, 0x8000}, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) fchdir(r3) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000140)={0x400}, 0x4) 01:04:13 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x1, 0x2, 0x4, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x2, 0x4, 0x8, r1}, &(0x7f0000000140)=0x10) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020700097a000000000000000200000002001300020000002bbd70000135000001001400bd258eefa1a673000000"], 0x28}}, 0xffffffffffffffff) 01:04:13 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7, 0x7fffffff, 0x7, 0xa20}, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = msgget$private(0x0, 0x80) msgrcv(r2, &(0x7f0000000140)={0x0, ""/107}, 0x73, 0x0, 0x1000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x48000, 0x0) 01:04:13 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x3b, r1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) write$binfmt_aout(r2, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8c) write(r2, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x90400, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000020000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) [ 373.829831] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 373.829831] program syz-executor5 not setting count and/or reply_len properly 01:04:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) splice(r3, &(0x7f0000000240), r0, &(0x7f00000002c0), 0x9, 0xe) write$binfmt_elf32(r2, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r4, @ANYBLOB="66b9d57348d5f48667feaf1bb335153856bb2be5a7c5cc4f3d01d6bdae5adfad6ece750d6ca2e5bf31efe7d55aec391856c1a2730b7a307e5c7dfc7712b8e907600f39b9a32a74f57818ea5dfa0f1ab0324a0f1262a2688b5eafa1"], 0x25e) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) [ 373.967333] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 373.967333] program syz-executor5 not setting count and/or reply_len properly [ 373.991970] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 373.991970] program syz-executor4 not setting count and/or reply_len properly 01:04:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 374.058619] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.094029] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:14 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x80080, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000180)={0x1, 0x4f900, "06e41e04e06da4762ababb2e0e54ff4847652775bbfa9b99", {0xed, 0x4}, 0x5}) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x40040) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0xad16, 0x1, [], &(0x7f0000000080)=0x8}) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x0, 0x97, 0x3, 0x39, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@remote, 0x2, 0x4, 0x14}, @sadb_address={0x3, 0x6, 0x33, 0x80, 0x0, @in={0x2, 0x4e22, @loopback}}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x11, 0x14, 0x14}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2b, 0x3501}, @sadb_lifetime={0x4, 0x3, 0xf3f2, 0x53, 0x40, 0x81}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bc0, 0xc8, {0x6, 0xff, 0x1000, 0x5, 0x0, 0x4d0, 0x0, @in6=@loopback, @in6=@mcast2}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x5, 0xffff, 0x48, 0x3, 0x20000000}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd2c, 0x3504}, @sadb_x_sec_ctx={0x17, 0x18, 0x100, 0x3, 0xaa, "7ba75cfba5106abf68009a1b4612c79ba4a2a5559f5e3a4d06d0f0482b99f0d8a613ad8988b76ecc21662a5306efcbfd219da4788af043577a08c96cb6b3990864ca2fe9757161cdbbe8cac21fc1a25c6bf4858f44d4cde8585e3bc48219d480e43bb936bf90379b208b7296bd118c78019659e9f97194b8a4e54c388a393b9cdf0fb5d818cc03fea15dbeb28e50cb88fa2e166a53cd00021bf4c8fe441b15d6429425effc6066f6febf"}]}, 0x1c8}}, 0x801) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 374.375821] FAULT_INJECTION: forcing a failure. [ 374.375821] name failslab, interval 1, probability 0, space 0, times 0 [ 374.387405] CPU: 0 PID: 16009 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #1 [ 374.394631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.404014] Call Trace: [ 374.406669] dump_stack+0x173/0x1d0 [ 374.410354] should_fail+0xa19/0xb20 [ 374.414147] __should_failslab+0x278/0x2a0 [ 374.418469] should_failslab+0x29/0x70 [ 374.422439] kmem_cache_alloc_node+0x123/0xc60 [ 374.427086] ? __alloc_skb+0x218/0xa20 [ 374.431038] ? aa_label_sk_perm+0x6d6/0x940 [ 374.435442] __alloc_skb+0x218/0xa20 [ 374.439222] ? pfkey_sendmsg+0x1/0x1a60 [ 374.443255] pfkey_sendmsg+0x1e9/0x1a60 [ 374.447305] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 374.452725] ? aa_sk_perm+0x605/0x950 [ 374.456614] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 374.462032] ? security_socket_sendmsg+0x1bd/0x200 [ 374.467040] ___sys_sendmsg+0xdb9/0x11b0 [ 374.471160] ? pfkey_release+0x510/0x510 [ 374.475310] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 374.480742] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 374.486172] ? __fget_light+0x6e1/0x750 [ 374.490241] __se_sys_sendmsg+0x305/0x460 [ 374.494475] __x64_sys_sendmsg+0x4a/0x70 [ 374.498583] do_syscall_64+0xbc/0xf0 [ 374.502355] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 374.507598] RIP: 0033:0x457ec9 01:04:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46000000000000aedf000000000000000000000000000000003800000000000000000000000000200000000000000000000000c39655e1b97cf958f3806284486f00000001000000000000000000000000000000000000000000000000000000000000"], 0x58) [ 374.510831] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 374.529770] RSP: 002b:00007f8f66b36c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.537519] RAX: ffffffffffffffda RBX: 00007f8f66b36c90 RCX: 0000000000457ec9 [ 374.544820] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 374.552117] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 374.559454] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f66b376d4 [ 374.566770] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:04:14 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x63, 0x400000) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:04:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000002fdb0000000000380000000000000000000000000020000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x20002, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f00000002c0)) fgetxattr(r1, &(0x7f0000000040)=@known='trusted.overlay.origin\x00', &(0x7f0000000200)=""/126, 0x7e) r3 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000180)=0x659) 01:04:15 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) splice(r3, &(0x7f0000000240), r0, &(0x7f00000002c0), 0x9, 0xe) write$binfmt_elf32(r2, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r4, @ANYBLOB="66b9d57348d5f48667feaf1bb335153856bb2be5a7c5cc4f3d01d6bdae5adfad6ece750d6ca2e5bf31efe7d55aec391856c1a2730b7a307e5c7dfc7712b8e907600f39b9a32a74f57818ea5dfa0f1ab0324a0f1262a2688b5eafa1"], 0x25e) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) 01:04:15 executing program 5 (fault-call:1 fault-nth:1): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 375.099348] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.212709] FAULT_INJECTION: forcing a failure. [ 375.212709] name failslab, interval 1, probability 0, space 0, times 0 [ 375.224554] CPU: 1 PID: 16057 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #1 [ 375.231784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.241169] Call Trace: [ 375.243826] dump_stack+0x173/0x1d0 [ 375.247532] should_fail+0xa19/0xb20 [ 375.251316] __should_failslab+0x278/0x2a0 [ 375.255625] should_failslab+0x29/0x70 [ 375.259577] __kmalloc_node_track_caller+0x208/0x1030 [ 375.264840] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 375.270272] ? kmem_cache_alloc_node+0x1ce/0xc60 [ 375.275089] ? pfkey_sendmsg+0x1e9/0x1a60 [ 375.279305] ? pfkey_sendmsg+0x1e9/0x1a60 [ 375.283520] __alloc_skb+0x309/0xa20 [ 375.287289] ? pfkey_sendmsg+0x1e9/0x1a60 [ 375.291509] pfkey_sendmsg+0x1e9/0x1a60 [ 375.295551] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 375.300976] ? aa_sk_perm+0x605/0x950 [ 375.304865] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 375.310286] ? security_socket_sendmsg+0x1bd/0x200 [ 375.314078] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 375.315292] ___sys_sendmsg+0xdb9/0x11b0 [ 375.326984] ? pfkey_release+0x510/0x510 [ 375.331106] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 375.336531] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 375.341941] ? __fget_light+0x6e1/0x750 [ 375.345984] __se_sys_sendmsg+0x305/0x460 [ 375.350201] __x64_sys_sendmsg+0x4a/0x70 [ 375.354316] do_syscall_64+0xbc/0xf0 [ 375.358116] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 375.363343] RIP: 0033:0x457ec9 [ 375.366597] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.385554] RSP: 002b:00007f8f66b36c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.393306] RAX: ffffffffffffffda RBX: 00007f8f66b36c90 RCX: 0000000000457ec9 [ 375.400618] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 01:04:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:15 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x30800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x2, 0x1}, 0x1, 0x100000001, 0x3, {0xec, 0x1ff}, 0x2, 0x10000}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:04:15 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000280)={0xdb, &(0x7f0000000180)=""/219}) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, 0x0) write$binfmt_script(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 375.407925] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 375.415231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f66b376d4 [ 375.422538] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:04:15 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2300, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r0}) 01:04:15 executing program 5 (fault-call:1 fault-nth:2): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 375.883268] FAULT_INJECTION: forcing a failure. [ 375.883268] name failslab, interval 1, probability 0, space 0, times 0 [ 375.895699] CPU: 1 PID: 16094 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #1 [ 375.902937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.912335] Call Trace: [ 375.915020] dump_stack+0x173/0x1d0 [ 375.918711] ? __should_failslab+0x278/0x2a0 [ 375.923184] should_fail+0xa19/0xb20 [ 375.926973] __should_failslab+0x278/0x2a0 [ 375.931273] should_failslab+0x29/0x70 [ 375.935228] kmem_cache_alloc+0xf9/0xb90 [ 375.939382] ? skb_clone+0x300/0x580 [ 375.943178] skb_clone+0x300/0x580 [ 375.946788] pfkey_sendmsg+0x76d/0x1a60 [ 375.950832] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 375.956295] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 375.961740] ? security_socket_sendmsg+0x1bd/0x200 [ 375.966741] ___sys_sendmsg+0xdb9/0x11b0 [ 375.970878] ? pfkey_release+0x510/0x510 [ 375.975018] ? kmsan_internal_unpoison_shadow+0x2f/0x40 01:04:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x200800) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) splice(r3, &(0x7f0000000240), r0, &(0x7f00000002c0), 0x9, 0xe) write$binfmt_elf32(r2, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r4, @ANYBLOB="66b9d57348d5f48667feaf1bb335153856bb2be5a7c5cc4f3d01d6bdae5adfad6ece750d6ca2e5bf31efe7d55aec391856c1a2730b7a307e5c7dfc7712b8e907600f39b9a32a74f57818ea5dfa0f1ab0324a0f1262a2688b5eafa1"], 0x25e) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) [ 375.980451] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 375.985888] ? __fget_light+0x6e1/0x750 [ 375.989950] __se_sys_sendmsg+0x305/0x460 [ 375.994187] __x64_sys_sendmsg+0x4a/0x70 [ 375.998314] do_syscall_64+0xbc/0xf0 [ 376.002125] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 376.007383] RIP: 0033:0x457ec9 [ 376.010632] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.029587] RSP: 002b:00007f8f66b36c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.037382] RAX: ffffffffffffffda RBX: 00007f8f66b36c90 RCX: 0000000000457ec9 [ 376.044699] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 376.052019] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 376.059361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f66b376d4 [ 376.066684] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 [ 376.156783] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 376.166814] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)={{0x1cc, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2000, 0x14) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:16 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) fsetxattr$security_evm(r1, &(0x7f0000000180)='security.evm\x00', &(0x7f0000000240)=@v2={0x3, 0x3, 0x13, 0x7fff, 0x6f, "32b63eef334f129eab56917f466e70476d107c28ec28160f35c66c7e555417506bfa2354d7438bfc0875917ed915700f58b054d258d5a335c6e446b5e09f472481d3610d679824d3224e9f4592893f77465da559ee47abc18af96dbdc76c2be630da1c4c7a6e7379e41edd0cd6a08e"}, 0x79, 0x3) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r2, &(0x7f0000000140)=0x4) 01:04:16 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000001c0)={0x7ff, 0x100000000}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa52, 0x2) sendto$rxrpc(r1, &(0x7f0000000140)="ea65272bfc5c7d35d89857190628c2ac413fe7f70155875e8e3579a3421a7e449d4d2cbba0a77c9a3acdbbb732", 0x2d, 0x80, &(0x7f0000000300)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffffffffff9, @local, 0xc}}, 0x24) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000080)={0x3, 0x32435750, 0x2e7, 0x3ff, 0x1, @stepwise={{0x1000, 0x9cb2}, {0x5, 0xff}, {0xffffffff, 0xff}}}) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="7370cb2300eef6487a25a7176600e6b62246a79e2ab8c910f66cc5ba4381725e9b1d99097a8b80ba46e3c6899460171bc9a48ff113bbf45dcb7760540408d3844ecb4813ddaa1dae031a35c616c532067f3493a865739461275658ce1b43ec"]) 01:04:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, 0x0, 0x0) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:16 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000240)={r3, 0x1}) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="23212022f49b8a6c65b3b296f8e3fb5cabab678b8fcf0b8b1c1d01689eceaeb8165cd7da89bf23c9c6ae4557fd9cebb631f807ed3f198ec833f7f453ff0000000000000056d2b95b0000000000010000000000"], 0x22e) pipe2(&(0x7f0000000040), 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1, 0x2, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000019000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000180)=0x5, 0x4) 01:04:16 executing program 5 (fault-call:1 fault-nth:3): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, 0x0, 0x0) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 376.882754] sg_write: 6 callbacks suppressed [ 376.882787] sg_write: data in/out 1821023184/506 bytes for SCSI command 0x89-- guessing data in; [ 376.882787] program syz-executor3 not setting count and/or reply_len properly [ 376.916635] FAULT_INJECTION: forcing a failure. [ 376.916635] name failslab, interval 1, probability 0, space 0, times 0 [ 376.928061] CPU: 0 PID: 16158 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #1 [ 376.935294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.944715] Call Trace: [ 376.947404] dump_stack+0x173/0x1d0 [ 376.951105] should_fail+0xa19/0xb20 [ 376.954899] __should_failslab+0x278/0x2a0 [ 376.959201] should_failslab+0x29/0x70 [ 376.963163] kmem_cache_alloc_trace+0x125/0xb90 [ 376.967905] ? __request_module+0x7fa/0x1340 [ 376.972412] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 376.977859] __request_module+0x7fa/0x1340 [ 376.982174] ? crypto_alg_mod_lookup+0x24f/0x1250 [ 376.987087] ? up_read+0x28/0x80 [ 376.990515] ? crypto_alg_lookup+0x41b/0x460 [ 376.995000] crypto_alg_mod_lookup+0x24f/0x1250 [ 376.999744] crypto_has_alg+0x8a/0x220 [ 377.003706] xfrm_probe_algs+0x43f/0x650 [ 377.007836] pfkey_register+0x1eb/0xc20 [ 377.011885] ? pfkey_acquire+0x380/0x380 [ 377.016005] pfkey_sendmsg+0x1663/0x1a60 [ 377.020148] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 377.025620] ___sys_sendmsg+0xdb9/0x11b0 [ 377.029751] ? pfkey_release+0x510/0x510 [ 377.033887] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 377.039348] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 377.044768] ? __fget_light+0x6e1/0x750 [ 377.048824] __se_sys_sendmsg+0x305/0x460 [ 377.053061] __x64_sys_sendmsg+0x4a/0x70 [ 377.057186] do_syscall_64+0xbc/0xf0 [ 377.060971] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 377.066217] RIP: 0033:0x457ec9 [ 377.069469] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.088424] RSP: 002b:00007f8f66b36c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.096199] RAX: ffffffffffffffda RBX: 00007f8f66b36c90 RCX: 0000000000457ec9 [ 377.103518] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 377.110825] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.118137] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f66b376d4 [ 377.125448] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:04:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) splice(r2, &(0x7f0000000240), r0, &(0x7f00000002c0), 0x9, 0xe) write$binfmt_elf32(r1, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r3, @ANYBLOB="66b9d57348d5f48667feaf1bb335153856bb2be5a7c5cc4f3d01d6bdae5adfad6ece750d6ca2e5bf31efe7d55aec391856c1a2730b7a307e5c7dfc7712b8e907600f39b9a32a74f57818ea5dfa0f1ab0324a0f1262a2688b5eafa1"], 0x25e) [ 377.149758] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 377.149758] program syz-executor4 not setting count and/or reply_len properly 01:04:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x6c, 0x0, 0x4}) [ 377.310135] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.413430] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, 0x0, 0x0) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:17 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000180)=""/17}) fchdir(r0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x208400, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2001, 0x0) 01:04:17 executing program 5 (fault-call:1 fault-nth:4): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:17 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 01:04:17 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socket$packet(0x11, 0x62d2d52f4c7fc695, 0x300) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x101000, 0x0) set_tid_address(&(0x7f00000001c0)) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000180)={0x0, 0x1, [0xff, 0x7, 0x4, 0xefe, 0x1, 0x80000000000000, 0x7, 0x2]}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 377.627136] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 377.627136] program syz-executor4 not setting count and/or reply_len properly [ 377.714471] FAULT_INJECTION: forcing a failure. [ 377.714471] name failslab, interval 1, probability 0, space 0, times 0 [ 377.725882] CPU: 0 PID: 16200 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #1 [ 377.733199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.742592] Call Trace: [ 377.745233] dump_stack+0x173/0x1d0 [ 377.748904] ? __should_failslab+0x278/0x2a0 [ 377.753381] should_fail+0xa19/0xb20 [ 377.757169] __should_failslab+0x278/0x2a0 [ 377.761477] should_failslab+0x29/0x70 [ 377.765429] __kmalloc_track_caller+0x1d3/0xce0 [ 377.770163] ? __request_module+0x87b/0x1340 [ 377.774633] ? strlen+0x51/0xa0 [ 377.777964] kstrdup+0xc4/0x160 [ 377.781326] __request_module+0x87b/0x1340 [ 377.785640] ? up_read+0x28/0x80 [ 377.789058] ? crypto_alg_lookup+0x41b/0x460 [ 377.793533] crypto_alg_mod_lookup+0x24f/0x1250 [ 377.798263] crypto_has_alg+0x8a/0x220 [ 377.802237] xfrm_probe_algs+0x43f/0x650 [ 377.806381] pfkey_register+0x1eb/0xc20 [ 377.810415] ? pfkey_acquire+0x380/0x380 [ 377.814526] pfkey_sendmsg+0x1663/0x1a60 [ 377.818656] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 377.824142] ___sys_sendmsg+0xdb9/0x11b0 [ 377.828255] ? pfkey_release+0x510/0x510 [ 377.832408] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 377.837836] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 377.843245] ? __fget_light+0x6e1/0x750 [ 377.847329] __se_sys_sendmsg+0x305/0x460 [ 377.851549] __x64_sys_sendmsg+0x4a/0x70 [ 377.855664] do_syscall_64+0xbc/0xf0 [ 377.859443] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 377.864677] RIP: 0033:0x457ec9 [ 377.867941] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.886885] RSP: 002b:00007f8f66b36c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.894862] RAX: ffffffffffffffda RBX: 00007f8f66b36c90 RCX: 0000000000457ec9 [ 377.902176] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 377.909485] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.916797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f66b376d4 [ 377.924109] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:04:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02070009020000000000000000000008578aba35faf7d7e2209ab50d3e4202afa76f49e4a99fda74d5f28943676842e4f0f78f"], 0x10}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000280)={{0x6, 0x6, 0xffffffffffffff67, 0x5, 'syz0\x00', 0x1}, 0x3, 0x0, 0x8, r3, 0x6, 0x9, 'syz0\x00', &(0x7f0000000240)=['cgroup\x00', '\x00', '\'(\x00', 'bdevsecuritytrusted*}\x00', '/dev/null\x00', '/dev/null\x00'], 0x35, [], [0x6, 0x10001, 0x101, 0x6]}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0xd006, {{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x26}, 0x6}}}, 0x88) 01:04:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:18 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x40) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local}}, {{@in=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000440)=0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x0, 0x2) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r4, 0x633, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x1) 01:04:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], @ANYRES16=0x0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYBLOB="b05480f077d3b3534e1ce263be7ebc0bc56aa9dcc32c7e987293b121450f871497f448bb6eab871ea3b29ed14219637da41e4b7b4a2c6fd15f4ed9a8382742860575bbfdfe81f729100401de9a1285a1f0b6c49d48eb9c1c55a3459046eb82ee96098c282cdcf6a5c51e73085119bb68cbc79a279e71a6f9b56713a83008d7cecb41daed2ae44d48fd8a2f96e6878408bc6a16a7e8f5abb477176f3c9293a8fc0c02aac1750cd7a17364edcc2f982fb2e678f2e8433146e8be2626d62f243415b74eacde64a9287a370eb6c7ea5e02604c4973dbb4d7786355ff56302823ec91410d8e0de21dac6986344693e2", @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESOCT=r0]], @ANYRESOCT=r0], 0xffffffffffffffd0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 378.144441] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 378.144441] program syz-executor4 not setting count and/or reply_len properly [ 378.238236] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 378.238236] program syz-executor4 not setting count and/or reply_len properly 01:04:18 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) splice(r2, &(0x7f0000000240), r0, &(0x7f00000002c0), 0x9, 0xe) write$binfmt_elf32(r1, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r3, @ANYBLOB="66b9d57348d5f48667feaf1bb335153856bb2be5a7c5cc4f3d01d6bdae5adfad6ece750d6ca2e5bf31efe7d55aec391856c1a2730b7a307e5c7dfc7712b8e907600f39b9a32a74f57818ea5dfa0f1ab0324a0f1262a2688b5eafa1"], 0x25e) 01:04:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x40, 0x1a4a73924d5592c4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x3, 0x200000) [ 378.417716] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO 01:04:18 executing program 5 (fault-call:1 fault-nth:5): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 378.468199] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x0, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 378.612372] FAULT_INJECTION: forcing a failure. [ 378.612372] name failslab, interval 1, probability 0, space 0, times 0 [ 378.623744] CPU: 0 PID: 16251 Comm: syz-executor5 Not tainted 4.20.0-rc7+ #1 [ 378.630979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.640378] Call Trace: [ 378.643041] dump_stack+0x173/0x1d0 [ 378.646727] ? __should_failslab+0x278/0x2a0 [ 378.651199] should_fail+0xa19/0xb20 [ 378.654983] __should_failslab+0x278/0x2a0 [ 378.659312] should_failslab+0x29/0x70 [ 378.663297] kmem_cache_alloc_trace+0x125/0xb90 [ 378.668034] ? memcg_kmem_put_cache+0x64/0x2d0 [ 378.672682] ? call_usermodehelper_setup+0x16d/0x550 [ 378.677860] ? kmsan_memcpy_memmove_metadata+0x58f/0xfa0 [ 378.681333] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 378.681333] program syz-executor4 not setting count and/or reply_len properly [ 378.683381] call_usermodehelper_setup+0x16d/0x550 [ 378.683433] ? __request_module+0x1340/0x1340 [ 378.683487] __request_module+0x9e5/0x1340 [ 378.683550] ? up_read+0x28/0x80 [ 378.683592] ? crypto_alg_lookup+0x41b/0x460 [ 378.683633] crypto_alg_mod_lookup+0x24f/0x1250 [ 378.683679] crypto_has_alg+0x8a/0x220 [ 378.683752] xfrm_probe_algs+0x43f/0x650 [ 378.719049] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 378.719049] program syz-executor4 not setting count and/or reply_len properly [ 378.721095] pfkey_register+0x1eb/0xc20 [ 378.721144] ? pfkey_acquire+0x380/0x380 [ 378.721176] pfkey_sendmsg+0x1663/0x1a60 [ 378.721226] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 378.721328] ___sys_sendmsg+0xdb9/0x11b0 [ 378.772322] ? pfkey_release+0x510/0x510 [ 378.776462] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 378.781903] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 378.787333] ? __fget_light+0x6e1/0x750 [ 378.791379] __se_sys_sendmsg+0x305/0x460 [ 378.795596] __x64_sys_sendmsg+0x4a/0x70 [ 378.799706] do_syscall_64+0xbc/0xf0 [ 378.803483] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 378.808709] RIP: 0033:0x457ec9 [ 378.811946] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 378.830885] RSP: 002b:00007f8f66b36c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.838642] RAX: ffffffffffffffda RBX: 00007f8f66b36c90 RCX: 0000000000457ec9 [ 378.845951] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 378.853274] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 01:04:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c0187"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x101, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000001c0)) [ 378.860585] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f66b376d4 [ 378.867892] R13: 00000000004c5194 R14: 00000000004d8a28 R15: 0000000000000004 01:04:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001, 0x0, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000"], 0x58) [ 379.139925] sg_write: data in/out 444/2334 bytes for SCSI command 0x6e-- guessing data in; [ 379.139925] program syz-executor4 not setting count and/or reply_len properly 01:04:19 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) splice(r2, &(0x7f0000000240), r0, &(0x7f00000002c0), 0x9, 0xe) 01:04:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x96, 0xdfe, "eca4604c66b9b78e3361913d90bafb0ad0ef51f9fd66124806ff20c87680667af2d8651b6ca6583e22d2e373384086692c5b9bcd411318c51b9aee4a0cac6b0763b09027cba7bbf205f9ad2c7bef0945a81e8cddb4d42db74790c4d2a826bfb4dba197aa9504f450c6469e5e6339f22952a4ae655b2f102060162e3c862fa7bebcd861d27bea7e20a5e8f5e0db54"}, 0x20000) [ 379.295923] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 379.295923] program syz-executor4 not setting count and/or reply_len properly 01:04:19 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) [ 379.355673] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.420505] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/195, 0x3e7}], 0x10000000000002bd) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x40000, 0x8, 0x20, 0x0, 0x0, 0x0, 0xfff}, [{}]}, 0x58) 01:04:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001, 0x0, 0x0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02100000020000000000000008000000c28aab8f6243411de6a5feb829422012ca05acfceba784d19d40872995f934a6230830f4a134285e83224dd9494414dd6a5e025125901281a9d423464101b1baafa4239862b1b056d7e98742618c3d130394ac4277cb1fc45f2d1cae45b9569909850a6db51c6745b0"], 0x10}}, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x20000) [ 379.634693] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 379.634693] program syz-executor4 not setting count and/or reply_len properly 01:04:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001, 0x0, 0x0, 0x0, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x0, 0x6, 0x1e0, 0x3bd, 0x400, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c0000000000000000000000000038000000000000000000000000009c7e1d86dadb69221600000200000000000000000000000000000000000000000000000000000002000000000000"], 0x58) 01:04:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x0, 0x152}, 0x10}}, 0x0) socketpair(0xa, 0x2, 0x4, &(0x7f0000000080)) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/206, 0xce) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 01:04:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x336, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) 01:04:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="232e65156c9850e402310a81de86d81a37e1082734cd11db3639a94bc9fc0b92cc1616dff8e304000000000000000b8b14"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xfffffffffffffd39}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000001c0)=0x8) 01:04:20 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020700090200e94a0000000000000000"], 0x10}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000140)=""/139) 01:04:20 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) splice(r2, &(0x7f0000000240), r0, &(0x7f00000002c0), 0x9, 0xe) write$binfmt_elf32(r1, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r3, @ANYBLOB="66b9d57348d5f48667feaf1bb335153856bb2be5a7c5cc4f3d01d6bdae5adfad6ece750d6ca2e5bf31efe7d55aec391856c1a2730b7a307e5c7dfc7712b8e907600f39b9a32a74f57818ea5dfa0f1ab0324a0f1262a2688b5eafa1"], 0x25e) [ 380.534631] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.618900] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 380.727443] program syz-executor2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.755162] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x800000, 0xfffffffffffffffc}, 0x10}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240)=0x7f, 0x4) setsockopt(r0, 0x7fff, 0x800, &(0x7f00000000c0), 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="560102100000020000000000000000e595a3"], 0x10}}, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f00000001c0)) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080)=0x7fff, 0x4) 01:04:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) rmdir(&(0x7f0000000040)='./file0\x00') r2 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x7, 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000280)) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460000000000000000000000f2c60000000000000000000000380000000000000000000000000020000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000cdb43a885f68f76c343576e51088fc284dd607bbcd74f991120c9dbebe69f534bef43afb98d28ba77baf00545d15e2359faa27f86ccb0aa30be52b0c689b0bf9dbc65e4bcabc"], 0x58) 01:04:21 executing program 1: r0 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x3ff, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@loopback}}, 0xe8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 01:04:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "8511498c6ecc9eac184edafafc372f7d449358f11ce46d15c2ae52183da2dcbc76ab38c53963001b5d44f40b7734", [[], [], [], [], [], [], [], [], []]}, 0x94e) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0xffffffffffffff1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x100, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x6f, &(0x7f0000000400), 0x4) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r3 = syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0xe4a1, 0x101000) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xc9b, @remote, 0xfffffffffffffff8}}, 0x7fffffff, 0x6, 0x1}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000002c0)={r4, 0xc, "1cfbed753bc6190715074ecd"}, &(0x7f0000000340)=0x14) 01:04:21 executing program 1: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) 01:04:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[], [], [], [], [], [], [], [], []]}, 0x920) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:21 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) 01:04:21 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1cbd747092b360"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:21 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) [ 381.572604] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO 01:04:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) splice(r2, &(0x7f0000000240), r0, &(0x7f00000002c0), 0x9, 0xe) write$binfmt_elf32(r1, &(0x7f0000000680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r3, @ANYBLOB="66b9d57348d5f48667feaf1bb335153856bb2be5a7c5cc4f3d01d6bdae5adfad6ece750d6ca2e5bf31efe7d55aec391856c1a2730b7a307e5c7dfc7712b8e907600f39b9a32a74f57818ea5dfa0f1ab0324a0f1262a2688b5eafa1"], 0x25e) 01:04:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[], [], [], [], [], [], [], []]}, 0x820) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000002000000000000000000000042465957a85c0300c79ef2d295dca79abcfc4fc1295b0c0ef287e1f6638d630c53d76411416db0c11b193454a6d216002bab20c945e3d0a60000a049efacabcab9a934ed5bed78416ba9acf2f5598b42a6e6bc7cbc30d1fddd013d2d2607bdc47cb089512e82beed534ae4508c780f69a54e7a50209df1aad08b622264e7256c9639ce83ed4c362ddbf15b4ca75f616a4760c5e7510b00"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0210000002374a00000000400000000056bb44a6dc0fb6638687c0ad0ee5cd00313c58a1922380e92dc4063664b65e5ca7a191441180ea7cd4fca6"], 0x10}}, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) r1 = syz_open_dev$usb(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x3, 0x80200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) lsetxattr$trusted_overlay_nlink(0xfffffffffffffffd, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'L+', 0x8}, 0x28, 0x1) [ 381.647895] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:21 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000240)=@alg, &(0x7f0000000040)=0x80, 0x80000) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000002c0)={0x5271a74e, 0x7, 0x3, 0x1}, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65310a96cf86d81a37e7cfbc907273f3190e20a67d065e86e108271625a9bbaf8fe5536b1b65cdf7424676dcfb2e9e7d4a9c15bb285b39328966bb35b5a71cdf34746ea99cfa93fd98e4b65263273eef9cd90dda6dc3902171a8f62d7ba2d760e9132b2f65f99e5cd8fc5114397187cc7b8b1a53044473e1f63f5508daa95a72ca7b1529ea7299cdbfc1cb1c7bb535b298b2d2a6c669a5da16c8700a5fb041"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 381.722476] program syz-executor1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.838911] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 381.843331] program syz-executor2 is using a deprecated SCSI ioctl, please convert it to SG_IO 01:04:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[], [], [], [], [], [], []]}, 0x720) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 381.881248] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x0, 0x400000) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={r2, @empty, @loopback}, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000180)={0xf1e, {{0xa, 0x4e23, 0x0, @local, 0x8}}}, 0x88) readv(r0, &(0x7f0000000380), 0x11d) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000240)) write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7fd2287bb0d1fc935f00000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000003c00000000000000000000000000000000000000000000ded819c277bd24e5cce38598c239d32f48f9b7094093c9c85d534fb0f315774099fc50ac1e050e3a60ae9d930aaa7d2f9fc8a6a2443cb05888fb73c8ee2e45737e9086964ed27f69759fe7f6c483dab876"], 0x58) [ 381.974793] sg_write: 8 callbacks suppressed [ 381.974823] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 381.974823] program syz-executor4 not setting count and/or reply_len properly 01:04:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[], [], [], [], [], []]}, 0x620) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1]}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000ddff00"], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:22 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) [ 382.369973] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 382.369973] program syz-executor4 not setting count and/or reply_len properly 01:04:22 executing program 3: recvmsg(0xffffffffffffff9c, &(0x7f0000000280)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000540)=""/245, 0xf5}], 0x1, &(0x7f0000000640)=""/4096, 0x1000}, 0x2002) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r2, 0x2285, 0x0) write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x10900) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000180)={0x0, 0x3eb, 0x73d1, 0x5, 0x80000000}) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 382.410263] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.439813] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x15}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x7ff}, &(0x7f0000000280)=0x8) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1ff, 0x1f, 0x0, 0x9, 0x1, 0x4, "4b5b515c00cbb4123c2e5c9e0921499637906c73557abf65c01d5f73044666b98d8653c329bf9fbafe6698115602f30117fe4bceebd8848c7673437ba5dedea3", "b5daad1542f50bf3cb6baa0f86c1eb04e39d3ff2bc8b9880d537d6fefeaaa8e4f938151bb41cf22757acbd308afa2f89f5e14304409b1350ed33432adb47b82a", "36ebb7def0ff975fddc15526c95f33244ee1a2e4fe03a26d1eaa9baf38a0166e", [0x4, 0x7]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x101000000000001, 0x4) connect$inet6(r0, &(0x7f0000000900)={0xa, 0x0, 0x0, @remote}, 0x1c) 01:04:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[], [], [], [], []]}, 0x520) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:22 executing program 2: unshare(0x400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0104307, &(0x7f0000000040)=0xa26) 01:04:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xd8, "d9b90adcc9d997f5f4ff7f4881526f8dba66b7803c1b0a640840e58ab6006074b25383b12cd20ff2aa81a3cc122cb993708f9d77de9cbcabfad2e9d0b6548511f86262c4bf8e52bf130a62e8334a84fea20e16a4bbec2de734b2f2302e16f15f484ec0f0a3950b07348a8c8ef1b2d222b424278effa646519662eb87f7564150bec9fa71dc699ba902e68c36c8c48b140b76061da5c0f7ac04860e579626d038bdc7aa3f9de8450053370e0f3048c8c2dd8efe54da700dc1cba425c5d423eea836086f4150898ee8efc5add4571ef2c9b5b5b20769644c18"}, &(0x7f0000000280)=0xe0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r3, 0x81, 0x5, 0x5}, &(0x7f0000000340)=0x10) 01:04:22 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) getsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000000)=""/156, &(0x7f0000000100)=0x9c) [ 382.785813] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 382.785813] program syz-executor4 not setting count and/or reply_len properly 01:04:23 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3b, 0x280) fstat(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="78010000170000032bbd7000fcdbdf25ffffffff000000000000000000000000000004d5ff000000ac1414bb000000000000000000000000ff020000000000000000000000000001ac1e01010000000000000000000000004e23dbf24e2200070a0080a006000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000ffffe00000014e2400004e230000020080a000000000000000000000000000000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="ff070000000000000100000000000000010000000000000000000000000000000500000000000000020000000000000005000000000000000300000000000000010000000000000092230000000000000000000000000000d90700000000000003000000b26b6e00020101030000000000b70000700100000200000027bd70000c00100000000000000000001c00040002004e214e200000e000000200000000000000000000000028001a007f000001000000000000000000000000ac1414120000000000000000000000000a0009db"], 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x349800, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f00000000c0), &(0x7f0000000040)=""/45}, 0x18) getpeername(r4, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000140)=0x80) 01:04:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[], [], [], []]}, 0x420) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3800020000000000000041c3a35b0de2334259ef045dc629eb0"], 0x24) r1 = socket$inet6(0xa, 0x80a, 0x1000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0xfffffffffffff001}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) poll(&(0x7f0000000180)=[{r3, 0x1000}, {r2, 0x8000}, {r3, 0xa000}], 0x3, 0x8) 01:04:23 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/llc\x00') ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz1\x00') epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x40000004}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 383.186897] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 383.186897] program syz-executor4 not setting count and/or reply_len properly 01:04:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x0, 0x3, 0x240e, 0x3, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2, r2}) prctl$PR_SET_FPEXC(0xc, 0x20000) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x2, r2, 0x200000000000005}) 01:04:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 01:04:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r2 = open(&(0x7f0000000040)='\x00', 0x12000, 0x100) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000180)={0xfffffffffffffff8}) 01:04:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[], [], []]}, 0x320) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 383.438669] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.465789] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:23 executing program 1: unshare(0x24020400) r0 = socket(0x22, 0x2, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x31}, @map={0x18, 0xf, 0x1, 0x0, r1}], &(0x7f0000000080)='syzkaller\x00', 0x7fffffff, 0x1e, &(0x7f00000000c0)=""/30, 0x41000, 0x1, [], 0x0, 0xf}, 0x48) bind$unix(r0, 0x0, 0x0) [ 383.663946] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 383.663946] program syz-executor4 not setting count and/or reply_len properly 01:04:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) 01:04:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x1, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pread64(r0, 0x0, 0x0, 0x0) r2 = gettid() r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x99, @local}}, 0x4, 0x10001, 0xfffffffffffffff8, 0x3ff, 0x1}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r4, 0x4) r5 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xc8, 0x341100) ioctl$SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f0000000080)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/vcs\x00', 0x0, 0x0) r7 = dup2(r6, r0) tkill(r2, 0x15) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x8001) 01:04:23 executing program 3: lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@random={'security.', '/dev/sg#\x00'}, &(0x7f00000001c0)='/dev/sg#\x00', 0x9, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:23 executing program 1: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000080)='fd/4\x00') r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f00000000c0)="be68d9f4fa7259cdd3c904e85b9a2c9bc95703240d3f3c1bd6b351f04d488f2ec73c2412553f7f21fff8b0b9259eeb9f33fdb8dfe90e94065a4a541ef57820d3d917e69563a3ef306965e5ade74310fc22271f1c1ff3e5d9d0bbc44b129ca3c74b11978171cfae500d8cd600fce2819c1fe5133bbc3d881e804e120a31b07ca3f4047f6c6bb1a46242d6c4f8b8c862614fb2d93807b8d96a7c6eafe90158", &(0x7f00000001c0)=""/238}, 0x18) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x8, 0xd, 0x2, "d8614f9a8050bc08b83304e7e0c089ae30f0d192efa39b4d83d4dec10e2e8233"}) [ 383.861251] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.902221] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[], []]}, 0x220) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:24 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) wait4(r0, &(0x7f00000000c0), 0x20000000, &(0x7f0000000100)) clone(0x8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, &(0x7f0000001640), 0x80000008, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x2c}, &(0x7f0000000000)) sched_getaffinity(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) tgkill(r1, r1, 0x13) 01:04:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000080)={0x3, "2c2ce97f600cdbe6af98aebe697213fc1451adbb756bd79ac9c6b65e8f24ee96", 0x5, 0x800, 0x7, 0x2, 0x4, 0x0, 0xffffffff7fffffff, 0x5}) 01:04:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 01:04:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0x85, 0x7ff, 0x1, 0x1, 0x2, [{0x101, 0x80, 0xfffffffffffffffb, 0x0, 0x0, 0x80}, {0x1, 0x5, 0x53d17854}]}) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket$inet6_udp(0xa, 0x2, 0x0) [ 384.225894] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.264163] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 384.264163] program syz-executor4 not setting count and/or reply_len properly [ 384.280769] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:24 executing program 1: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x41fe, r0, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000210071010000000000000000020000000000fdffffffffffffff01000c001400", @ANYRES32=0x0, @ANYRES32=0x0], 0xffc5}}, 0x0) 01:04:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x813d, 0x4000) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101440, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x1}}, 0x40, 0x1}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={r4, 0x71376a23}, &(0x7f00000002c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 384.421849] netlink: 16 bytes leftover after parsing attributes in process `syz-executor1'. 01:04:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) 01:04:24 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="380af000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000020000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}}, 0x0) 01:04:24 executing program 1: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000d805000018020000100100000000000028030000700400b9c9b89000a8050000a8050000a8050000a8050000a805000006000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800444e5054000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000076657468305f746f5f6873720000000079616d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbb431b7e151b52b8f0e3382859b98a10000000000000000000000000000000000000000000000000000000000000000c800080100000000000000000000000000000000000000000000000040004c4f470000000000000000000000000000000000000000000000000000000000bf15016f2d5340acc1a7d8f721552cb49ee17e833eb8c93fc54e1dc1ae98000000000000000000000000000000000000000000000000000000000000f9ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800444e505400000000000000000000000000000000000000000000000000007f00000100000000000000000000000000000000000000000000ffffac1414000000000000000000fe8000000000000000000000000000aaff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000007465716c3000000000000000000000006361696630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f0000000000000000000000000000000000000000000000000002800544f53000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280044534350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028000000ff8104b600000000000000000000000000000000"], 0x638) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x1c7, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x4}]]}}}]}, 0x3c}}, 0x3) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 384.684639] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.719708] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; 01:04:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000ac67c4835324f2ef000000003800e9cc000000000000000000002000000000000000000000000000000000000000002a032f780000000000000000000000000000000000000000006a05a39b5f8079200c4a75ee0e6195c911d7ca1c092599818968c82330e6c40508e118edfa1cff0137e548b6662eb27a5194ffd72414308a6f83e42ff61c3cff382d3d62274cb048030c8d44b953ffd12e243f48c4f62164ce7cb29de3735620d05a880e478a7e41cac818b467f48eb221dcfd5d9ffeaa39c9ceb5bd29dc4e17"], 0x58) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000540)="149933c17d0908656a1b5b0e2a44d20eff7ed1eda713bd56338c8d801e6d29e20c81fd5c4bfbe540533ea082e5c829eb69d15e0c1747c27d35beeb9504cfc058f8e6cb071fc94ab431d07e85a9a50404c4fe224573e22a2494ea8ddae631b808b6933bae875c18f9a69533d858760077bbabb4037baf0b1bfc384b999fe377a884436515", 0x84}], 0x1, 0x0) [ 384.719708] program syz-executor4 not setting count and/or reply_len properly [ 384.751516] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:24 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0x806a88e) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000000c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 01:04:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x3ffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000000300)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000340)={0x0, r0, 0x0, 0xb8d, 0xa77d, 0xfffffffffffffffb}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'ip6gretap0\x00', @ifru_addrs=@can={0x1d, 0x0}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_getaddr={0x2c, 0x16, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x15}, 0x0) lstat(0x0, 0x0) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) ioctl$void(r1, 0x544f) 01:04:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02a700e804200e634c8431a91db889ac786ee282bd2c9eb86a2cfc4de6bff062f7ab57e1e3191c26553f4d59f3857649ee2d2faa7273e4999bb7db0aa3728093268ae6c56bd6a261cc73275548b2564335a55fc1a5df5cc308f4224ac0df8dd40bdaae2731b2b3feba3e7a76bd14e1d5a577ce59c2f5c7c10264a864c956dff6da32f291c4a0e9e55bdda016cfeabe1805d2b0f6bb17fb686d7b6657b929bdeb03dda5bbc2242de35aa91ecbd8a8e81a505de9dd23ddbeb67b2deec4856680307963bf217f1a532f6ef8ca3c117128acf47798d3305d9c7ad0835bb9d8"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") 01:04:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}}, 0x20) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) lseek(r0, 0x0, 0x3) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e11616dff8e3fb5cabab678bd9cf0b701c"], 0x24) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 385.236822] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.248502] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 385.248502] program syz-executor4 not setting count and/or reply_len properly [ 385.275300] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000ac67c4835324f2ef000000003800e9cc000000000000000000002000000000000000000000000000000000000000002a032f780000000000000000000000000000000000000000006a05a39b5f8079200c4a75ee0e6195c911d7ca1c092599818968c82330e6c40508e118edfa1cff0137e548b6662eb27a5194ffd72414308a6f83e42ff61c3cff382d3d62274cb048030c8d44b953ffd12e243f48c4f62164ce7cb29de3735620d05a880e478a7e41cac818b467f48eb221dcfd5d9ffeaa39c9ceb5bd29dc4e17"], 0x58) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000540)="149933c17d0908656a1b5b0e2a44d20eff7ed1eda713bd56338c8d801e6d29e20c81fd5c4bfbe540533ea082e5c829eb69d15e0c1747c27d35beeb9504cfc058f8e6cb071fc94ab431d07e85a9a50404c4fe224573e22a2494ea8ddae631b808b6933bae875c18f9a69533d858760077bbabb4037baf0b1bfc384b999fe377a884436515", 0x84}], 0x1, 0x0) 01:04:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3f) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") 01:04:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}}, 0x20) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0xf}}, 0x40000) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 385.498553] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.509260] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000ac67c4835324f2ef000000003800e9cc000000000000000000002000000000000000000000000000000000000000002a032f780000000000000000000000000000000000000000006a05a39b5f8079200c4a75ee0e6195c911d7ca1c092599818968c82330e6c40508e118edfa1cff0137e548b6662eb27a5194ffd72414308a6f83e42ff61c3cff382d3d62274cb048030c8d44b953ffd12e243f48c4f62164ce7cb29de3735620d05a880e478a7e41cac818b467f48eb221dcfd5d9ffeaa39c9ceb5bd29dc4e17"], 0x58) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000540)="149933c17d0908656a1b5b0e2a44d20eff7ed1eda713bd56338c8d801e6d29e20c81fd5c4bfbe540533ea082e5c829eb69d15e0c1747c27d35beeb9504cfc058f8e6cb071fc94ab431d07e85a9a50404c4fe224573e22a2494ea8ddae631b808b6933bae875c18f9a69533d858760077bbabb4037baf0b1bfc384b999fe377a884436515", 0x84}], 0x1, 0x0) [ 385.627158] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 385.627158] program syz-executor4 not setting count and/or reply_len properly 01:04:25 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x8, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "960d87e5"}, 0x0, 0x0, @offset, 0x4}) 01:04:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x6b8000, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000001c0)={r2, 0x3}) r3 = dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x4e20, @remote}}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000ca30db7117a824e00c81608e33cfc116000000002000000000000000000000000000000000000000000000000000004c8091a041a75b030000000000000000000000"], 0x68) 01:04:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) pipe(&(0x7f0000000000)) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") 01:04:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x2) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000080)={0x2a, 0x3, 0x9}) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="fb070000020000000000000000000000"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1230}}, 0x4) [ 385.844881] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.873216] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:25 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000ac67c4835324f2ef000000003800e9cc000000000000000000002000000000000000000000000000000000000000002a032f780000000000000000000000000000000000000000006a05a39b5f8079200c4a75ee0e6195c911d7ca1c092599818968c82330e6c40508e118edfa1cff0137e548b6662eb27a5194ffd72414308a6f83e42ff61c3cff382d3d62274cb048030c8d44b953ffd12e243f48c4f62164ce7cb29de3735620d05a880e478a7e41cac818b467f48eb221dcfd5d9ffeaa39c9ceb5bd29dc4e17"], 0x58) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000540)="149933c17d0908656a1b5b0e2a44d20eff7ed1eda713bd56338c8d801e6d29e20c81fd5c4bfbe540533ea082e5c829eb69d15e0c1747c27d35beeb9504cfc058f8e6cb071fc94ab431d07e85a9a50404c4fe224573e22a2494ea8ddae631b808b6933bae875c18f9a69533d858760077bbabb4037baf0b1bfc384b999fe377a884436515", 0x84}], 0x1, 0x0) 01:04:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}}, 0x20) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") [ 386.036635] sg_write: data in/out 1743152244/135 bytes for SCSI command 0x6-- guessing data in; [ 386.036635] program syz-executor4 not setting count and/or reply_len properly 01:04:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x892, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x482100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x700, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x81, 0x1000, 0x0, 0xffffffffffffffe0}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x0) [ 386.136749] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.200081] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) write$P9_RREMOVE(r1, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[]}}, 0x0) 01:04:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000ac67c4835324f2ef000000003800e9cc000000000000000000002000000000000000000000000000000000000000002a032f780000000000000000000000000000000000000000006a05a39b5f8079200c4a75ee0e6195c911d7ca1c092599818968c82330e6c40508e118edfa1cff0137e548b6662eb27a5194ffd72414308a6f83e42ff61c3cff382d3d62274cb048030c8d44b953ffd12e243f48c4f62164ce7cb29de3735620d05a880e478a7e41cac818b467f48eb221dcfd5d9ffeaa39c9ceb5bd29dc4e17"], 0x58) 01:04:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(0xffffffffffffffff, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:26 executing program 0: ioctl(0xffffffffffffffff, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") 01:04:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x2) 01:04:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x200) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:26 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") 01:04:26 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(0xffffffffffffffff, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") 01:04:27 executing program 5: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) fcntl$getflags(r0, 0x40a) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(0xffffffffffffffff, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073ec58ce081d3a46b8dcb235cb1fe59d18c4ca4a688c20c3a5243062d14dab55efd74f6d6590c84020b9aa4448223c2551165e0204b2a2f4a1c8a9e6587f3c34ae28f45bcfe9dc3a9fb04f21b8739b6a3bfe442ba37c4542726", 0xb1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x892, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x482100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x700, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x81, 0x1000, 0x0, 0xffffffffffffffe0}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x0) 01:04:27 executing program 0: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") 01:04:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x0, &(0x7f00000001c0)="f3f1675430ca13a9b7c110e26c9902934090b8778e28f8030933a4a8f259f4badeb74d058c36e65248822a43e23808bed82692cf73c88755c3968a99ef63b2cc077a72f483e34a9ade2c31bd72f700e2d83117fbb1dd9ef92129eaf590a46f9aee901e06a3e2aa2497a5892d1e80f3d8") 01:04:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:27 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) 01:04:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x5, 0x0) 01:04:28 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x100000000, 0x2, 0x0, 0x70bd28}, 0x10}}, 0x0) r1 = getpid() r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x25000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x74, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) ptrace$cont(0x20, r1, 0x5, 0x1ff) 01:04:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 388.225036] program syz-executor0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.307213] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 01:04:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:28 executing program 0: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) 01:04:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x892, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x482100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x700, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x81, 0x1000, 0x0, 0xffffffffffffffe0}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x0) 01:04:28 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r1, 0x2285, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x800, 0x0) signalfd4(r1, &(0x7f00000001c0)={0x20000000000000}, 0x155, 0x0) write$binfmt_script(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x7ff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000200)={0x1, {0x77359400}, 0x1f, 0x7f}) 01:04:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 388.689534] QAT: Invalid ioctl 01:04:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab658bd9cf0b8b1c"], 0x24) r1 = dup3(r0, r0, 0x80000) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700d14b1fb6dcb4651d23528b7c66a0a0799ef9e4df4963ca64cf29643e3bee158a432cbe4dea018cb148cb073e", 0x59) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="04a8f08ea2ce5e"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000300)=0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x7, @ipv4={[], [], @empty}, 0x7ff}}, 0x2, 0x2}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x2, 0x6, [0x9, 0x1ff, 0x401, 0xce3b, 0x5, 0x4]}, 0x14) [ 389.391286] sg_write: data in/out 1743152244/47 bytes for SCSI command 0x6-- guessing data in; [ 389.391286] program syz-executor4 not setting count and/or reply_len properly 01:04:29 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000000240)="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", 0x480, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0x71e10f339006afa9, 0x40050, 0x0, 0x0) 01:04:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)='4', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x892, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x482100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x700, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x81, 0x1000, 0x0, 0xffffffffffffffe0}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/34, 0x10000017a}], 0x2, 0x0) 01:04:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x2}, 0x8) restart_syscall() 01:04:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)='4', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:29 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 01:04:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'ifb0\x00'}) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)='4', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:30 executing program 0: r0 = epoll_create(0x2) r1 = socket(0x10, 0x3, 0x0) dup3(r1, r0, 0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='fdinfo/3\x00') sendfile(r1, r3, 0x0, 0x80000001) 01:04:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001095700", 0x2d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, 0x0, 0x80000001) 01:04:30 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) [ 390.879412] sg_write: data in/out 1743152244/3 bytes for SCSI command 0x6-- guessing data in; [ 390.879412] program syz-executor4 not setting count and/or reply_len properly 01:04:31 executing program 2: syz_open_procfs(0x0, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000380)) setpriority(0x2, 0x0, 0x0) 01:04:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x100, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x406, r2) openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x410180, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x121000, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x100000000) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000180)=0x7, 0x4) 01:04:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1210000000001900ad33000000000000"], 0x10}}, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$RTC_VL_CLR(r1, 0x7014) 01:04:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)='4', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, 0x0, 0x80000001) 01:04:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, 0x0, 0x80000001) 01:04:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)='4', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:31 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 01:04:31 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x100, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x70, 0x1, 0x10001, 0x200, 0x100000001, 0x0, 0x4, 0x0, 0xa, 0xffff, 0x7, 0x9, 0x9, 0x100000000, 0x6, 0xffffffffffffff01, 0x1ff, 0x6, 0x4, 0xfff, 0xe6, 0x7, 0x7, 0x4d, 0x957, 0x1f, 0x3f, 0x0, 0x80, 0x4, 0x3f, 0x1, 0x0, 0x1, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0xfff}, 0x10220, 0xffff, 0x8001, 0x7, 0x8000, 0x2000, 0x80000000}, r0, 0x2, r1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) ioctl$SG_IO(r2, 0x2285, 0x0) clone(0x40204000, &(0x7f0000000180)="664047e51a60da1718cdfb7985b787bf3d8de0498e1962628b75a076de8b2be3352e78e478d300a0b7dd9e64f3c499f3dca55f1f1ebc726c0ef2787fb052e62bc22b2b9c6f7343abcda8e9dfe83c3e423aeb0febdbad7b62b9982a70420ced7cd21da012493793232eb76a454bc9b6d16d55a297fb0efae644b36811ed84591e8fa8e5470bc2aff01d9d70fc1cb4b482108560e1104b1a17506e0e29943395929be100732bb92ff8f64d62da657a86ada02b4812bdbce1dbbbc296921b63017791948bfb178753100c6db30502fec87cfa60f5b4affb32775db4e727c8d4538c", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000540)="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") write$binfmt_script(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r2, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x58) 01:04:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)='4', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:31 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000000c0), 0x1000001d1) tee(r2, r1, 0xfffffffffffffffd, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x41776784) [ 391.907331] IPVS: ftp: loaded support on port[0] = 21 01:04:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="021000008bfe0b6308be00"], 0x10}}, 0x0) 01:04:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, 0x0, 0x80000001) 01:04:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922", 0x17) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) 01:04:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922", 0x17) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) [ 392.527684] IPVS: ftp: loaded support on port[0] = 21 01:04:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_ifreq(r0, 0x8934, &(0x7f0000000040)={'bcsf0\x00', @ifru_addrs=@l2={0x1f, 0x7, {0xad, 0x38, 0x400, 0x0, 0x6852, 0x1c0c}, 0x3f, 0x7}}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922", 0x17) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:33 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="021000000200000027bd6400000000002682591ea0272b0464dbb5ba8573f19a25e981f347858248043093c75f565808b4bcfd5a95b753c305743023fd2edcb4c8430b2b09f8db5fd1e2f3dc41b658440086077e5cadc65afefb7e15a85f4dd7155e26cff5a95c3874b18e49b273644a89204f8222eb65f641eb263d4ff5"], 0xffffffffffffff75}}, 0x1000000) 01:04:33 executing program 0: r0 = socket(0x0, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, 0x0, 0x80000001) 01:04:33 executing program 2: syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000380)) setpriority(0x2, 0x0, 0x0) 01:04:33 executing program 2: getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffd) mmap(&(0x7f00006fc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) pread64(r0, &(0x7f0000000000)=""/211, 0xd3, 0x0) 01:04:33 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:33 executing program 0: r0 = socket(0x10, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, 0x0, 0x80000001) 01:04:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75", 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000003b80)='./file0\x00', 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000004f00)={'icmp\x00'}, &(0x7f0000004f40)=0x1e) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000005000)={@empty, 0x0}, &(0x7f0000005040)=0x14) sendmmsg(r2, &(0x7f0000005380)=[{{&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @loopback, 0x9}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)="ac0db86521009c257d5c640cf054137517ce68e6a38680c801b69f236c4c0aa256e1174f76a10796df605721f95cad4299e3c2059c5bd14601855d8eb4345c4ef093c5b1216e7f7b4c2f409759c462a278c2c649e8ae68bd696fe724d3391f5506986243d40d34e9b7fa", 0x6a}], 0x1}, 0x3}, {{&(0x7f0000000580)=@nfc_llcp={0x27, 0x1, 0x2, 0x3, 0xfff, 0xf35, "4c33f4e9a8cf210c11538bd1660eae9e64be5195eb598d5844806ef74d413b7970aacba29c33484582e96625169ade17020435ec1be21a0b240a1a5c13a0d2", 0x1b}, 0x80, 0x0, 0x0, &(0x7f0000003b80)}, 0x2}, {{&(0x7f0000003bc0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003c40)="30a741330ebc92dcca18e2ee84e7d3138261cc356de8604d886fe1ef7f9ca5b5eeda6cb66616b8572cc2f085769f30f8ff4d27d442143f688bdfab7c4c3a14e64f173dfbd0402fe73b941df363f2229aca5306a4aeb825f1705b49489fdf5cb08d36c117f5df0df257541459ee313dedf934f96d3397d984018aa6d0d87b3259750dc31855498b72ebc42cfbad47cc08d7925ad58641ba0010dd0ea91ac32f04f644d03917e95dcf5f57eeca044e939d0919dce76a5b8ff78dbbf02b9e", 0xbd}], 0x1}, 0x100000001}, {{&(0x7f0000005080)=@hci={0x1f, r5, 0x1}, 0x80, &(0x7f0000005200)=[{&(0x7f0000005100)="82c2f72e0c05977b8a12881ba499529d4e5953486e0cdf2e3b0c5aafba5beb935adf866b7dfcb7d200cd643eb6ddecf8132fc17e81e4d4e86ff47a6067cf6eab74f56b90629548a2b8bad2408276baba0ff7b5f916a44c8af551d90665c0d807550b51137299f0d77d7d4883fb5db027a29a259bb89d097e23bf3154c64344f06bb3fa1008f2d6bf2fa6b4392722670306b9d3a311a723f859e6aa8a206af05e2297f8d14e1f76372e3fa2d0830729744b0a610a0bc83c5bf8f79846566c04980ef85fcdd4c94c6fce", 0xc9}], 0x1}, 0xfffffffffffffffa}], 0x4, 0x10) sendto$inet(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) 01:04:33 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) [ 393.591324] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 01:04:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b891cf012b9e6526da08f91775e15ca2d002b20a16cff7d2ba741125004a7a5f573e7108fd5c0c405"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) prctl$PR_SET_DUMPABLE(0x4, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000240)=0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000200)=0xe0f3, 0x8) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000000000000200000000000c85904aa353ac79b3f00000000000000000000000000000000002300000000000000000000000000000000ff0f00"], 0x58) 01:04:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75", 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 01:04:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x381000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x45) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x11800011}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000240)=0x8) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:34 executing program 2: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x7f, &(0x7f0000000040)=0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) io_submit(r1, 0x0, 0x0) 01:04:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:34 executing program 0: socket(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 01:04:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75", 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:34 executing program 2: pipe(0x0) pipe(0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) 01:04:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380), 0x1092) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f", 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) 01:04:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000001c0)=0xb) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000100)={0x1, 0x47, 0xfa00, {&(0x7f0000000040), r2}}, 0x17a) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000140080000000000000000000da5ae388e53a96b520a02a8b1a9114c87c1d45fb0554cf4bb40e707f0f164a3b77c84ce2200ed205e32186a1eeae7d0d295ac330be9c0ee9cfaf254a142bc69b860aff3ad9002f9fd6b3e9ace54e8787c1d388c7"], 0x10}}, 0x0) 01:04:34 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 01:04:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000e5000000000000ff00000020a6fb073465b7a3318655ee0000000000000000000000000000000000009f39ffdc50fa63683af9c20000000000"], 0x58) 01:04:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, 0x0, 0x0) 01:04:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f", 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:35 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000080)) 01:04:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678bd9cf0b8b1c"], 0x24) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x200600, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x34, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1063084000000000000000000d63000004630440000000000c63000005630440010000000f630c40000000000400000000000000176638ee860200000000000000fc04849d509238b3f5ea29548a6e36357c8ce38409ff61aaf971c175b61d04d12305734ef5c888b94085c7de510a0106d918353504f05d4c723f970dfaf828b960b956f438f1edc5b4c5bf5980e181c3e5f00cbba3df"], 0x53, 0x0, &(0x7f00000003c0)="6d218a57e43e6db9dd913593530b8cf49f6d5af5015d2bcb4273ab55025f0d9378da4f2fe726931e80354a6d3c000e4fe28f02e05a5e8d44a789d97b5f627ed89a984d7c41d893447d85e3d4354306d8279d43"}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000540)) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x80100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x20) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) r5 = accept4(r1, &(0x7f0000000000)=@ipx, &(0x7f0000000180)=0x80, 0x80000) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) bind$vsock_dgram(r5, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) 01:04:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, 0x0, 0x0) 01:04:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f", 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:35 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000240)=0x200, 0x4) 01:04:35 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) write$selinux_attr(r0, &(0x7f0000000480)='system_u:object_r:removable_device_t:s0\x00', 0x28) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) truncate(&(0x7f0000000040)='./file0/bus\x00', 0x0) 01:04:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r1, 0x0, 0x0) 01:04:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65310a96de86d81a37e108271616dff8e3fb5cabab678ad9cf0b8b1cc292cc7b3bcc60dc5f724f927570bd83a4b287514270a72224146b517bb5d2c907932e89e4984d4780efee81a8ec13cb021a39a4ec52f90864f8335ed2e2f7e8340e961678cd43"], 0x24) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000500000200000000"], 0x58) 01:04:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f200109", 0x2b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 395.928806] sg_write: data in/out 1743152244/1 bytes for SCSI command 0x6-- guessing data in; [ 395.928806] program syz-executor4 not setting count and/or reply_len properly 01:04:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) 01:04:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:04:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f20", 0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0xde) ioctl$LOOP_CLR_FD(r0, 0x4c01) fadvise64(0xffffffffffffffff, 0x0, 0x81, 0x4) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x3e0000000) 01:04:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, 0x0, 0x7, 0x2192, 0x0, 0x0, 0x25dfdbff}, 0x10}}, 0x0) r1 = open(&(0x7f0000000280)='./file0\x00', 0x400000, 0x3) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) 01:04:36 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) 01:04:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f20", 0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:36 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x1b) ioctl$KDENABIO(r0, 0x4b36) 01:04:37 executing program 0: clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x1f) 01:04:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f20", 0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:37 executing program 2: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1c3) setresuid(r1, 0x0, 0x0) exit_group(0x0) ioprio_set$pid(0x2, 0x0, 0x0) 01:04:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4001) fstatfs(r0, &(0x7f0000000200)=""/228) 01:04:37 executing program 3: epoll_create(0x2) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000140)='./file0\x00', 0xffc, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000000001f5ffffff000000006d7a4aeb6e59f2db020008000100e0000002"], 0x20}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)) 01:04:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0ffe8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00003c040000000000006f460000000000006b0a00fe000000008500000007000000c7000000000000009500000000000000"], 0x0}, 0x48) 01:04:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000001500)={{0x5, 0x100000001, 0x7fff, 0x7ff, 0x5, 0x7}, 0x7fffffff, 0x1, 0x1, 0x80, 0x0, "c424dc797fb0d825861d5397cd149f3a4ff5a8caaccc1a44f2d8f22765247e700aa24a870b2745cdc71c46e14cc77ec6efe105f0a8cb22c1e04f3b215c2fb2e3e834e81925a4046b15300e0935a06a3938ec2afabd86640244734c7495e9707c974b2b047fd9a19b0576b7c63a857e150922bd4d43b9d96b26e29fe7e95f56a6"}) accept$unix(r1, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x6, 0x7, 0x2, 0x2]}, &(0x7f00000000c0)=0xc) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000240)="be793b41edec82", 0x7}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="e25ae7e9ecd07df06388950f196e6dfc4f1de1171eac26bece3610e97a56426f18a47a64c5f7270e35b5de81bcf2152b0ad0cec56184f9e0b9e63d2e690b63d322df9ef89a2be8407b3b5f85fe9900725ddcbd5e0e7fded06412b9bba39e0e6901b9c394bfa20a5f4e7b8c2d5cf5062b75382e0ac3b7d84dd3e4b26f3ad23513981b2d5f8c1154ab18bbff2ee6f67b09bdcbb10b12697a57bfc0a29639e6b4ff5fec9608defa511ad53143a853efa26766b8b5210485044567db057e9141c5e26ff5f0411c45e98ab063f1", 0xcb}, {&(0x7f0000000280)="58ff832ec3828335c8249a42154a3e2e0b04acfece04404ac9ce80ccb96630e734e50e17bd78ba5572febcedcfcbc7c6ea", 0x31}], 0x4) 01:04:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f2001", 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:37 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000400)) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xef, 0x0, 0x0, 0x500, 0x3, 0x240}) 01:04:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x8000a0, &(0x7f0000000200)="10"}) [ 397.923713] binder: 17338:17340 transaction failed 29189/-22, size 0-0 line 2834 [ 397.998930] binder: 17338:17340 transaction failed 29189/-22, size 0-0 line 2834 [ 398.032977] binder: undelivered TRANSACTION_ERROR: 29189 01:04:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x200000000053, 0xfffffffffffffffb, 0x2c, 0x4f, @buffer={0x0, 0x4e, &(0x7f0000000180)=""/78}, &(0x7f0000000480)="8c24dfd49c18d7cda10f9cd167b499b81bf199fc02a14366a83c0f88f86227bc2d34e158b626b5745386f1d6", &(0x7f0000000200)=""/26, 0x5, 0x40008000000010, 0x3, &(0x7f0000000600)}) 01:04:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f20", 0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:38 executing program 2: 01:04:38 executing program 0: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', 0x0) getresgid(0x0, 0x0, 0x0) clone(0x100002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000380)) setpriority(0x2, 0x0, 0x0) 01:04:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="23000000150081ae00002c000500018702546fabca1b4e7d06a6580eebb3556b3d5df5", 0x23}], 0x1}, 0x0) 01:04:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000540)={{0x0, 0x80000001}, "", [[]]}, 0x120) write(r0, &(0x7f0000000ec0)="3472ac049864e66705ff01718d81ff9b9492b7717c9922f2e8b29a5042283c279f75bccf06cfbb3f20", 0x29) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 01:04:38 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 398.717239] ================================================================== [ 398.724692] BUG: KMSAN: uninit-value in _decode_session4+0x3d0/0x1c90 [ 398.731300] CPU: 1 PID: 17384 Comm: syz-executor0 Not tainted 4.20.0-rc7+ #1 [ 398.738498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.747861] Call Trace: [ 398.750480] dump_stack+0x173/0x1d0 [ 398.754152] kmsan_report+0x12e/0x2a0 [ 398.757993] __msan_warning+0x82/0xf0 [ 398.762040] _decode_session4+0x3d0/0x1c90 [ 398.766333] __xfrm_decode_session+0x152/0x210 [ 398.770949] ? xfrm4_get_saddr+0x3e0/0x3e0 [ 398.775227] vti6_tnl_xmit+0x182/0x2360 [ 398.779243] ? packet_direct_xmit+0x3e0/0x3e0 [ 398.783766] ? dev_queue_xmit_nit+0x1185/0x1260 [ 398.788497] ? vti6_dev_uninit+0x660/0x660 [ 398.792768] dev_hard_start_xmit+0x607/0xc40 [ 398.797260] __dev_queue_xmit+0x2e42/0x3bc0 [ 398.801678] dev_queue_xmit+0x4b/0x60 [ 398.805516] ? __netdev_pick_tx+0x1270/0x1270 [ 398.810055] packet_sendmsg+0x8306/0x8f30 [ 398.814237] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 398.819657] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 398.825147] ? rw_copy_check_uvector+0x149/0x650 [ 398.830002] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 398.835461] ___sys_sendmsg+0xdb9/0x11b0 [ 398.839550] ? do_futex+0x350/0x68a0 [ 398.843318] ? compat_packet_setsockopt+0x360/0x360 [ 398.848375] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 398.853779] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 398.859180] ? __fget_light+0x6e1/0x750 [ 398.863221] __sys_sendmmsg+0x570/0xa60 [ 398.867268] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 398.872740] ? prepare_exit_to_usermode+0x114/0x420 [ 398.877773] ? syscall_return_slowpath+0x50/0x650 [ 398.882655] __se_sys_sendmmsg+0xbd/0xe0 [ 398.886765] __x64_sys_sendmmsg+0x56/0x70 [ 398.890935] do_syscall_64+0xbc/0xf0 [ 398.894688] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 398.899895] RIP: 0033:0x457ec9 [ 398.903102] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.922015] RSP: 002b:00007f176bc58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 398.929742] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9 [ 398.937023] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 398.944303] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 398.951582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f176bc596d4 [ 398.958865] R13: 00000000004c4b74 R14: 00000000004d8290 R15: 00000000ffffffff [ 398.966170] [ 398.967805] Uninit was created at: [ 398.971364] kmsan_internal_poison_shadow+0x92/0x150 [ 398.976481] kmsan_kmalloc+0xa6/0x130 [ 398.980298] kmsan_slab_alloc+0xe/0x10 [ 398.984211] __kmalloc_node_track_caller+0xe18/0x1030 [ 398.989420] __alloc_skb+0x309/0xa20 [ 398.993148] alloc_skb_with_frags+0x1c7/0xac0 [ 398.997670] sock_alloc_send_pskb+0xafd/0x10e0 [ 399.002266] packet_sendmsg+0x661a/0x8f30 [ 399.006435] ___sys_sendmsg+0xdb9/0x11b0 [ 399.010511] __sys_sendmmsg+0x570/0xa60 [ 399.014506] __se_sys_sendmmsg+0xbd/0xe0 [ 399.018583] __x64_sys_sendmmsg+0x56/0x70 [ 399.022747] do_syscall_64+0xbc/0xf0 [ 399.026481] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.031681] ================================================================== [ 399.039043] Disabling lock debugging due to kernel taint [ 399.044503] Kernel panic - not syncing: panic_on_warn set ... [ 399.050406] CPU: 1 PID: 17384 Comm: syz-executor0 Tainted: G B 4.20.0-rc7+ #1 [ 399.058993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.068353] Call Trace: [ 399.070971] dump_stack+0x173/0x1d0 [ 399.074636] panic+0x3ce/0x961 [ 399.077902] kmsan_report+0x293/0x2a0 [ 399.081736] __msan_warning+0x82/0xf0 [ 399.085563] _decode_session4+0x3d0/0x1c90 [ 399.089845] __xfrm_decode_session+0x152/0x210 [ 399.094449] ? xfrm4_get_saddr+0x3e0/0x3e0 [ 399.098707] vti6_tnl_xmit+0x182/0x2360 [ 399.102706] ? packet_direct_xmit+0x3e0/0x3e0 [ 399.107220] ? dev_queue_xmit_nit+0x1185/0x1260 [ 399.111943] ? vti6_dev_uninit+0x660/0x660 [ 399.116201] dev_hard_start_xmit+0x607/0xc40 [ 399.120673] __dev_queue_xmit+0x2e42/0x3bc0 [ 399.125064] dev_queue_xmit+0x4b/0x60 [ 399.128879] ? __netdev_pick_tx+0x1270/0x1270 [ 399.133391] packet_sendmsg+0x8306/0x8f30 [ 399.137566] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 399.143053] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 399.148523] ? rw_copy_check_uvector+0x149/0x650 [ 399.153320] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 399.158774] ___sys_sendmsg+0xdb9/0x11b0 [ 399.162853] ? do_futex+0x350/0x68a0 [ 399.166594] ? compat_packet_setsockopt+0x360/0x360 [ 399.171734] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 399.177127] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 399.182511] ? __fget_light+0x6e1/0x750 [ 399.186534] __sys_sendmmsg+0x570/0xa60 [ 399.190571] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 399.196039] ? prepare_exit_to_usermode+0x114/0x420 [ 399.201074] ? syscall_return_slowpath+0x50/0x650 [ 399.205947] __se_sys_sendmmsg+0xbd/0xe0 [ 399.210041] __x64_sys_sendmmsg+0x56/0x70 [ 399.214215] do_syscall_64+0xbc/0xf0 [ 399.217970] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.223176] RIP: 0033:0x457ec9 [ 399.226384] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.245299] RSP: 002b:00007f176bc58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 399.253019] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9 [ 399.260300] RDX: 000000000400004e RSI: 0000000020000d00 RDI: 0000000000000003 [ 399.267575] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 399.274851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f176bc596d4 [ 399.282133] R13: 00000000004c4b74 R14: 00000000004d8290 R15: 00000000ffffffff [ 399.290485] Kernel Offset: disabled [ 399.294117] Rebooting in 86400 seconds..